KR20120096742A - Building energy integration management apparatus and building energy integration management method - Google Patents

Abstract

PURPOSE: A building energy integration controlling apparatus and a method thereof are provided to efficiently perform access control for integrated energy management through security policy definition of a building in an integration control center. CONSTITUTION: It differently sets whether to access permission about building energy related devices in policy database(96). The policy database stores access policy information obtained to a user. It resets whether to access permission about building energy related devices in policy database.

Description

Building energy integration management apparatus and method {Building energy integration management apparatus and building energy integration management method}

The present invention relates to a building energy integrated control device and method, and more particularly, to a building energy integrated control device and method that can control a plurality of building-specific energy information and the like and control user access.

The field of energy saving for buildings (eco-friendly low energy building technology) is an important project to be selected as 27 major green technology fields by the Green Growth Committee. The field of energy saving in buildings is not limited to the narrow meaning of saving energy by simply building sensor-based communication networks in buildings, and it is possible to create various synergies by combining various fields such as contents, communication, broadcasting, and information equipment. Is in the spotlight.

The services of the building energy control center have unlimited potential for development into other businesses, use organic technologies in various fields, and contain various existing security vulnerabilities by mixing heterogeneous wired / wireless networks and protocols. have. These security vulnerabilities can directly damage life and assets, so countermeasures are essential.

Therefore, there is a need to build an integrated security infrastructure that satisfies the convenience and safety of the service of the building energy control center at the same time and can be easily and flexibly applied to the existing building management service system.

Therefore, it is possible to select a desired authentication method by reflecting the characteristics of various users or the characteristics of a building, to be installed in all client devices, and to provide user authentication technology considering efficiency and convenience. In addition, the development of a real-time access control technology that actively controls the access rights in case of internal or external illegal access or infringement incidents, and blocks access to unnecessary services even for authorized users.

Typically, there is no expert in each building to analyze energy trends and various environmental factors. Accordingly, in each building, the manager of the building gave experience-based control. However, such experience-based control reflection is not uniform and requires a center that can manage energy in an integrated way because of wrong control.

Accordingly, the control and control target of the building energy integrated control center may be a lighting device, an air conditioner, a heating device, a heating device, and the like existing in each building.

As a communication method applied to the building energy control center, both wired communication and wireless communication can be utilized. Wireless communication technologies that have recently been intensively studied include RF (Radio Frequency), Bluetooth, wireless LAN, and IrDA using infrared rays.

On the other hand, building energy integration control centers should provide building energy managers and users with optimized energy saving measures. In addition, building energy managers and users must perform control based on safe and reliable information. To this end, it is necessary to define an access policy that allows access through differential access according to user / building purpose / service.

In addition, building energy integration control centers with energy integration control should allow or restrict data access to various energy-related devices by users based on strong security policies.

However, in general, the security policy application method for setting access rights of a user to use is separately set and configured devices that can be accessed by each user and devices that are restricted. Accordingly, when the number of users increases and the number of buildings to be managed increases, the applied security policy becomes complicated and difficult to manage.

Among the general security setting methods, there is a level application method that differentiates and sets access rights for each device. The security policy method of setting the access rights of each individual user to a corresponding level according to the various building uses has an advantage that the security policy can be conveniently applied in an environment where a large number of users and the buildings to be managed are provided. However, in order to apply different access rights to a specific user, there is a problem of applying access rights by creating and setting another level in addition to the basically set level.

The present invention has been proposed to solve the above-mentioned problems, and provides an integrated control and control device for building energy to achieve efficient access control for integrated energy management by defining security policies for each building use in an integrated control center. The purpose is.

Building energy integrated control device according to a preferred embodiment of the present invention to achieve the above object, as a building energy integrated control device of the server / client structure, any one of a plurality of security levels are set to give to the user A policy database storing access policy information granted to a user by setting different access permissions for a plurality of building energy related devices; A policy security management module for generating access policy information and resetting access permission of the user to some or all of a plurality of building energy related devices; And an access control server for determining whether to access a service based on the access policy information for the user who made the service request.

Multiple levels of security are classified by building use. In this case, different authentication schemes are applied to each of the plurality of security levels.

Preferably, the method further includes an authentication module for authenticating the user.

The access control agent may further include an access control agent for performing access control according to a decision of the access control server and storing the result in a log file.

The intrusion detection module may further include an intrusion detection module that collects traffic attack information and determines whether there is an attack and an attack type by using the collected information.

Building energy integrated control method according to a preferred embodiment of the present invention, the building energy integrated control method in the building energy integrated control device of the server / client structure, and set any security level among a plurality of security levels to the user. Granting a user a different setting whether to allow access to a plurality of building energy related devices; And resetting whether the user is allowed to access some or all of the plurality of building energy related devices.

Multiple levels of security are classified by building use. In this case, different authentication schemes are applied to each of the plurality of security levels.

Further comprising authenticating the user.

And performing the service request from the user based on the access control policy generated by the security level setting step and the access permission reset step.

The performing of the access control policy may include determining whether to allow access of the user based on the access control policy in response to receiving a service request from the user; And performing content according to an access control policy for a user determined to be allowed to access.

Determining whether the user is allowed to access may include receiving an access request message from the user; Extracting a user ID, a target to be accessed, and corresponding operation information from the access request message; And searching for all corresponding access control policies based on the extracted information to provide search contents.

In the access control policy execution step, when performing the access denial, the access request is denied and a service denial message is transmitted to the user.

The access control policy execution step stores the access request denied information in a log file when the access is denied.

The access control policy execution step alerts the administrator when the access is denied.

And storing the access control policy granted to the user by the security level setting step and the access permission reset step.

Differentiated authentication policy is defined for each network section according to network connection with building energy integrated control device. In this case, the authentication policy is defined to perform authentication combining IP authentication, mandatory access control authentication, and user ID and password authentication between the external terminal and the security gateway of the building energy integrated control device. The authentication policy is defined to perform authentication by an accredited certificate between the external terminal and the security policy server of the building energy integrated control device. The authentication policy is defined to perform authentication combining IP authentication, mandatory access control authentication, and user ID and password authentication when using the service of the building energy integrated control device in an external terminal. The authentication policy is stipulated to perform authentication combining a user ID and password authentication, and a building's own certificate authentication between the administrator of the building energy integrated control device and the security policy server of the building energy integrated control device. The authentication policy is defined to perform user ID and password authentication between a user inside a building and a security policy server of a building energy integrated control device. The authentication policy is stipulated to perform authentication which combines IP authentication, mandatory access control authentication, and in-building self-certification authentication when using the services of the building energy integrated control device at the security gateway of the building energy integrated control device. The authentication policy is stipulated to perform user ID and password authentication between the user inside the building and the security gateway of the building energy integrated control device. The authentication policy is stipulated to perform authentication combining a user ID and password authentication, and a building's own certificate authentication between the administrator of the building energy integrated control device and the security gateway.

Preferably, the method may further include collecting traffic attack information and determining the attack type and the attack type using the collected information.

According to the present invention having such a configuration, an efficient access control for integrated energy management centered through the definition of security policy for each building use of the integrated building energy control system.

In the present invention, the security policy can be efficiently managed by using a security policy setting method in which a random access control method and a mandatory access control method are mixed.

According to the present invention, there is an effect that a security policy specific to a specific user can be efficiently established and managed.

According to the present invention, a security policy can be established by a security policy manager connected to a web portal or a management GUI. Therefore, even when the security policy manager is located outside, an access right for controlling devices inside a building energy control center can be set. It can be effective.

1 is a view schematically illustrating a connection between a building energy integrated control device and a building client and an external terminal according to an exemplary embodiment of the present invention.
FIG. 2 is a diagram for describing a security model for the building client and the building energy integrated control device shown in FIG. 1.
3 is a view for explaining the access control structure of the building client and the building energy integrated control device shown in FIG.
4 is a view for explaining a building energy integrated control apparatus according to an embodiment of the present invention.
FIG. 5 is a diagram illustrating a security authentication policy for each section for the building client and the building energy integrated control device shown in FIG. 4.
6 is a view for explaining a key distribution mechanism in the key distribution center shown in FIG.
7 is a view for explaining a user authentication mechanism in the authentication module of the building energy integrated control device shown in FIG.
FIG. 8 is a flowchart illustrating access control in an access policy module of the building energy integrated control device illustrated in FIG. 4.
9 is a detailed flowchart of the access control decision step of FIG.
10 is a flowchart illustrating a building energy integrated control method according to an embodiment of the present invention.
FIG. 11 is a flowchart illustrating data and operations transmitted and received between a terminal and a security server of a security policy manager in the description of a building energy integration control method according to an embodiment of the present invention.

Hereinafter, a building energy integrated control apparatus and method according to an embodiment of the present invention will be described with reference to the accompanying drawings. Prior to the detailed description of the present invention, the terms or words used in the specification and claims described below should not be construed as being limited to the ordinary or dictionary meanings. Therefore, the embodiments described in the specification and the drawings shown in the drawings are only one of the most preferred embodiments of the present invention and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

In the specification of the present invention, the building energy integrated control device establishes a single integrated server to monitor the energy usage trend, automatic control operation status and environmental factors of each building, and collect / analyze the energy consumption data of multiple buildings based on this. It is a device that can identify each building energy waste and provide optimized energy saving measures to building energy managers and users. Accordingly, the building energy integrated control device of the specification of the present invention is a new product for each existing building, and integrates renewable energy and high efficiency electronic products and efficiently connects with an external electric power grid (HEMS) or building energy (BEMS). It can be understood that it is different from a system such as a management system and a smart meter.

Of course, the building energy integrated control device may be referred to as a building energy integrated control center. The security policy or access control policy described in the specification of the present invention may be referred to as a security method (or rule) or an access control method (or rule).

1 is a view schematically illustrating a connection between a building energy integrated control device and a building client and an external terminal according to an exemplary embodiment of the present invention.

The building energy integrated control device 200 serving as a server and a building client 100 divided into a plurality of uses are connected through a network 400 (internet) and a gateway 420. The external user requests and receives desired information and services through the network 400 and the gateway 420. The external terminal 410 is controlled from the outside based on the information provided from the building energy integrated control device 200. The gateway 420 has a security processing unit such as a firewall, a virtual private network (VPN), an intrusion detection system (IDS), an intrusion prevention system (IPS), and the like.

Here, the building energy integrated control device 200 monitors the energy usage trend, automatic control operation state and environmental factors of each building. The building energy integrated control device 200 collects / analyzes energy consumption data of a plurality of buildings based on the monitored information. The building energy integrated control device 200 finds energy waste elements of each building based on the analyzed result and provides optimized energy saving measures to the building energy manager and the user. To this end, the building energy integrated control device 200 includes functions such as authentication, access control, and intrusion detection.

The authentication function refers to verifying the subject's ability or the subject's ability to access arbitrary information. Authentication prevents unauthorized use of the system and improper transmission of information. User authentication includes authorization and accountability. Authorization refers to the permissions that a system grants to a user, program, or process. Responsibility traceability is a record of who, when, and what actions were performed in a network environment where multiuser and multitasking is supported so that the actor can be traced if necessary. Responsibility traceability has led to the need to clarify accountability, which can raise awareness of unauthorized or authorized users in terms of system protection, thereby reducing fraud on the computer. It is one of the important factors.

Access control (or access control) is the ability to allow or deny someone to use something. The access control function determines the authority of the service user for a file or directory service object, and thus prevents an illegal use of the system or an illegal transmission of information.

Intrusion detection means detecting and blocking harmful traffic. The development of the Internet has provided users with an environment in which a variety of fast services can be provided through a network. As dependence on network-based services has increased, harmful traffic detection and blocking has become an essential requirement for providing secure services. A traffic congestion attack, which is a representative harmful traffic, paralyzes not only computers but also the network, which has a tremendous effect on business and causes a great damage. Traffic congestion attack detection through packet collection, which is a general attack detection method, can be analyzed in detail, but requires a high-performance, high-performance analysis system, and has a disadvantage in that installation and operation are not scalable. Therefore, the intrusion detection function in the integrated building energy control device of the present invention uses SNMP (Simple Network Management), which enables effective detection that uses less system and network resources, and can receive network performance management data standardized on a layer and protocol basis. Protocol-based intrusion detection.

On the other hand, the building energy integrated control device according to an embodiment of the present invention may be further provided with an electronic signature function, encryption function, data forgery / alteration prevention function.

FIG. 2 is a diagram for describing a security model for the building client and the building energy integrated control device shown in FIG. 1.

Legacy building devices usually do not have a communication interface, however, there is a dedicated path connected to the type B building device so that the legacy building device can access the building network through the type B building device. Some building devices combine the features of type A and C building devices. There are eight entities in this model: ① remote user, ② remote terminal, ③ application server, ④ building gateway, ⑤ security application server, ⑥ building user, ⑦ center manager, and ⑧ building device.

Here, preferably, the building device type may be grouped into three categories (type A building device, type B building device, type C building device). A building device is an entity (or building application) such as a PDA, PC, TV / VCR that controls or is controlled by another device and provides services to building users. Type A building devices are remote controllers (remote controls), PCs or PDAs that control type B building devices or type C building devices through presentation pages and rich displays. A type B building device is a bridge connecting a type C building device without a communication interface in a building network. Type C building devices such as security cameras, A / V devices, and the like provide only the remaining service type of some building devices. If you are the security owner of a type B building device or a type C building device, the type A or C building device is called a security console.

And there are 13 relationships in the security model. Ie remote users and remote terminals, remote terminals and building gateways, remote terminals and secure application servers, remote terminals and building devices, application servers and building gateways, application servers and secure application servers, application servers and building devices, building gateways and buildings Devices, security application servers and building devices, building devices and building users, building devices and other building devices, building gateways and security application servers, and building managers and building gateways.

3 is a view for explaining the access control structure of the building client and the building energy integrated control device shown in FIG.

The access control scenarios of the building client 100 and the building energy integrated control apparatus 200 are classified into four types as follows.

1. Use of building energy integrated control service using clients in building

(A) Internal access to the building client 100 → external service (content provider) ("①" in Figure 3)

(B) Inside the building client 100 → service access in the building energy integrated control device 200 ("②" in Figure 3)

2. Use of building energy integrated control service using non-building clients

(A) Outside the building client 100 → access / control building equipment in the building client 100 (“③” in FIG. 3)

3. Use of building energy integrated control service using client in building energy integrated control device (center)

(A) Access to an external service (content provider) in the building energy integrated control device 200 ("④" in FIG. 3)

(B) Within the building energy integrated control device 200 → access / control building equipment (“5” in FIG. 3)

4. Use of building energy integrated control service using off-center clients

(A) Other than building energy integrated control device 200 → Service access in building energy integrated control device 200 (“6” in FIG. 3)

4 is a view for explaining a building energy integrated control device according to an embodiment of the present invention, an integrated security platform structure of a building energy integrated control device according to an embodiment of the present invention.

The building client 100 and the building energy integrated control device 200 illustrated in FIG. 4 are connected to the key distribution center 300 through a user browser or terminal 40 and an alarm unit 50.

The user browser or the terminal 40 corresponds to a unit for displaying the accessible services according to the part performing authentication and the access control policy.

The alarm unit 50 serves largely as an overall system alarm, and informs the user according to whether the intrusion detection unit is detected.

The building client 100 includes a cryptographic module 10, an authentication module 20, and an intrusion detection module 30.

The cryptographic module 10 performs the symmetric key / asymmetric key-based cryptographic algorithm interworking based on the key management and managed key needed in the encryption / decryption process through interworking with the key management unit 14 and the cryptographic algorithm unit 16. Key management and cryptographic algorithm interworking unit 12, the key management unit 14 for managing the key needed in the encryption and decryption process, and manages the algorithm for encryption and decryption based on symmetric key / asymmetric key for the managed key A cryptographic algorithm unit 16 is included.

The authentication module 20 performs key management and encryption algorithms to perform symmetric key / asymmetric key based encryption algorithms based on the key management and managed keys required in the authentication process through the interlocking of the key management unit and the encryption algorithm unit. Interworking unit 22, the user authentication processing unit 24 to determine whether the user's authentication success to receive the service of the integrated energy control center, and restricts access according to the determined result, and the building energy integrated control device for the user authentication processing And a user authentication processing interworking unit 26 for interworking with the user authentication processing interworking unit 72 of 200 to perform bidirectional user authentication through an encryption protocol.

The intrusion detection module 30 is an SNMP agent 32 that transmits data on MIB (Management Information Base) information used for the intrusion detection to the intrusion detection module 120 of the building energy integrated control device 200, and actually MIB data transmission unit 34 for transmitting MIB information to the intrusion detection module 120 of the building energy integrated control device 200 using a UDP communication protocol.

The building energy integrated control apparatus 200 includes an authentication module 60, an encryption module 80, an access policy module 90, a policy security management module 110, and an intrusion detection module 120.

The authentication module 60 manages security events generated when performing authentication and access control, and manages user information necessary for user authentication processing and access control. Log information analysis processing unit 64 for analyzing the log that can be performed, user database 66 that stores information (eg, ID, password, etc.) of the use in performing authentication and access control , A log database 68 that stores all log information generated by authentication and access control, and determines whether the user's authentication succeeds in order to receive the services of the building energy integrated control device. Restriction user authentication processing unit 70, in conjunction with the user authentication processing linkage unit 26 of the building client 100 for user authentication processing Key management required in the authentication process through interworking with the user authentication processing interworking unit 72 for performing two-way user authentication through the protocol protocol, and the encryption algorithm unit 82 and the key management unit 84 of the cryptographic module 80 And a key management and encryption algorithm interworking unit 74 for performing symmetric key / asymmetric key based encryption algorithm interworking based on the managed key.

The encryption module 80 is a cryptographic algorithm unit 82 for managing algorithms for symmetric key / asymmetric key-based encryption and decryption for the managed key, and key management unit 84 for managing the keys required in the encryption / decryption process. And key management for performing symmetric key / asymmetric key-based encryption algorithm interworking based on key management and managed key needed in the encryption / decryption process through interworking with the encryption algorithm unit 82 and the key management unit 84. Cryptographic algorithm interworking portion (86).

The access policy module 90 receives access of the service from the access control server 94 and access control agent 92 and access policy security manager 112 that actually provide different services through the user browser or the terminal 40. An access control server 94 for determining whether to access a service according to an access control policy (also referred to as a security policy) generated from the service, access control policy related information (e.g., security level according to user and / or building use, A security policy agent (96) having an authentication policy for each network section and service), and a security management agent for storing the access control policy in the policy database (96) through interworking with the access policy security manager (112). 98).

The policy security management module 110 manages an access control policy generated by the access policy security manager 112 using the DAC technique and the MAC technique.

Discretionary Access Control (DAC) is a random access control technique that restricts access to an object based on the identity of a subject or a group to which it belongs. That is, the DAC scheme establishes a relationship between an authorized user (Subject) and information (Object) that can change the permission. Thus, the owner of the information decides to grant certain rights to specific users. The access control policies based on the DAC technique are represented by the access control matrix model, such as a capability list having a row-oriented representation, a profile, and a password. In addition, policies with column-centric representations include Protection Bits and Access Control Lists (ACLs). The access control policy by the DAC technique is not unified for all users and information, but consists of one user information unit. For example, an information owner in a Unix system can grant access only to a specific user or group of users by owner's decision. In addition, when a user who has been granted access to the information copies the information, the access rights granted to the original information are not propagated to the copied object, and access restrictions are set by one subject and object unit. It does not affect the creation of object relationships. Due to the nature of the DAC, access is based entirely on the identity of the subject, so the access control policy by the DAC technique has no knowledge of the meaning of the data and does not determine access permissions based on it.

Mandatory Access Control (MAC) is a mandatory access control technique, and is a method of controlling access to an object based on authorization of a subject with respect to an object having confidentiality. In the MAC technique, only the administrator of the access control, not the owner of the object, sets and modifies the classification of information resources, and granting other access rights is strictly limited by the policy. Accordingly, the MAC scheme is generally more secure than the DAC scheme. In addition, the MAC technique is used in places that require the confidentiality of information rather than the access control policy of the DAC technique by defining an access control relationship between one subject and an object that cannot be changed by the owner of the object. By default, the access control policy is imposed. All objects are given a security label based on the confidentiality of the information and are strictly managed so that only authorized users can access it.

Intrusion detection module 120 of the information updated through the MIB updater 122, MIB updater 122 that performs a periodic update of the MIB information through the MIB data transmitter 34 of the building client 100 MIB collector 124 for collecting and storing only information necessary for the intrusion detection portion, and attack detection unit 126 for detecting an attack through the collected MIB data and detection algorithm.

The key distribution center 300 distributes the keys of the symmetric key / asymmetric key used in the building client 100 and the building energy integrated control device 200.

In FIG. 4, the building energy integrated control apparatus 200 may be divided into a security policy server (not shown) and a security server (not shown). In this case, the policy security management module 110 of FIG. 4 is embedded in a security policy server (not shown), and all modules 60, 80, 90, and 120 except for the policy security management module 110 are secure servers (not shown). Is omitted).

In the system as described above, when the authentication request is generated in the user browser or the terminal 40 through the building client 100, the authentication module 60 of the building energy integrated control device 200 received the request. The user authentication processing unit 70 in the authentication module 60 checks the user information and then uses the service. Each key management and encryption algorithm interworking unit 12, 22; 74, 86 included in the building client 100 and the building energy integrated control device 200 performs encryption / decryption to securely transmit / receive data.

On the other hand, when a service request occurs in the access control server 94, the access control policy and environment information (e.g., user information (user ID, password), building purpose, control state (e.g. On / off state of the building energy-related device, etc.) is determined whether to grant access to the access control agent 92 that performs the access control. The access control agent 92 performs a process defined by the access control policy and stores it in a log file. Here, the building energy-related device means a variety of heat transfer devices installed in the building.

In the case of intrusion detection, after the MIB information is collected by the building energy integrated control device 200 using the MIB collector 124, the presence and attack type of the attack may be obtained by using the information collected by the attack detector 126. Judge

FIG. 5 is a diagram illustrating a security authentication policy for each section for the building client and the building energy integrated control device shown in FIG. 4.

The access control technology for the integrated building energy control device is a real-time control technology that not only blocks illegal access inside and outside the building energy integrated control device and the building client, but also does not allow unnecessary service access even for legitimate users. The building energy integrated control device is aimed at users with various building characteristics (types / uses), and it is aimed at the class managers in the building energy integrated control devices. As such, uniformly applying established policies is inefficient and can lead to abuse and misuse of services. In addition, leakage of user IDs and their confidential information can seriously damage building energy integrated control devices and building clients.

Therefore, the present invention enhances the security of the building energy integrated control device through a real-time access control function, thereby restricting illegal access or unnecessary system resource usage inside and outside the building energy integrated control device and the building client.

In the present invention, in order to substantially comply with the user authentication security policy prescribed to ensure the safety of the integrated building energy control and control device, the differentiated authentication policy for each network section and service is defined. We also adopted a separate user authentication technology to comply with this. A user authentication security policy is a set of rules that define the security elements necessary to determine whether a user accessing an information system is a legitimate user.

In FIG. 5, a security authentication policy for each network section and service provided by a building energy integrated control device will be described in consideration of security vulnerabilities and security requirements.

Referring to FIG. 5, it is defined to perform authentication by a user ID and a password between an external user and an external terminal. Between the external terminal and the security gateway (or security server), it is specified to perform authentication combining IP (IP) authentication, mandatory access control (MAC) authentication, and user ID and password authentication. It is specified to perform authentication by a certificate (PKI) between the external terminal and the security policy server of the building energy integrated control device. When using the service of the building energy integrated control device in the external terminal, it is specified to perform authentication combining IP authentication, mandatory access control authentication, and user ID and password authentication. Between the administrator of the building energy integrated control device and the security policy server of the building energy integrated control device, it is specified to perform authentication which is a combination of user ID and password authentication and self-certification authentication in the building. It is specified to perform user ID and password authentication between the user inside the building and the security policy server of the building energy integrated control device. When using the services of the building energy integrated control device at the security gateway (or security server), it is specified to perform authentication combining IP authentication, mandatory access control authentication, and self-certification authentication in the building. It is specified to perform user ID and password authentication between a user inside a building and a security gateway (or security server). Between the administrator of the building energy integrated control device and the security gateway (or security server), it is specified to perform authentication that combines user ID and password authentication and self-certification authentication in the building.

As shown in FIG. 5, a control server of a center manager or an internal user (that is, a building energy integrated control device) when using a service through security of a building energy integrated control device in a building client outside the building and in a building energy integrated control device. When using my service, the control server platform should perform user authentication. At this time, the authentication method is a user authentication based on ID (ID) / password (PASSWORD) and certificate. When user authentication is made, service authentication is performed by the control server platform. Service authentication is achieved by access control service provided by security policy manager which is control server platform. The access control functions provided by the control server platform use information about the authenticated entity or the attributes of the entity to determine and enforce the entity's legitimate access. If an entity attempts to use an unauthorized resource or attempts to use an authorized resource but with inappropriate access rights, the access control function rejects the request and reports the event for further alerts. And record in the security audit trail. Access control functions may include the following items (e.g., authentication information such as passwords, possessions, evidence of authorization of an entity; legitimate evidence for access to an entity or resource defined by a feature, possession, or feature; authorization certificate; access primarily in accordance with security policies). The level of security associated with the entity used to grant or deny; path of attempted access; physical location of attempting access, etc.).

6 is a view for explaining a key distribution mechanism in the key distribution center shown in FIG.

For efficient key distribution, a building client 100, a gateway 420, a building energy integration control device 200, and a key distribution center 300 are required. In the key distribution scenario, the building client 100, the gateway 420, and the building energy integrated control device 200 each have their own private keys KRx (x = c, ap, s), and the key distribution center 300 Suppose you have KRx in advance. The key distribution goes through the following process.

① When the user requests a key distribution request, the building client 100 generates EKRc (IDc, N1) using the IDc and the nonce value N1 and transmits it to the gateway 420. IDc is information of the building client 100. Here, EKRc (IDc, N1) encrypts using RSA, which is an asymmetric encryption algorithm, and uses private key KRc.

② The gateway 420 receiving the EKRc (IDc, N1) generates a nonce value N2 and encrypts the N2, EKRc (IDc, N1) with the private key KRap and transmits it to the key distribution center 300.

③ The key distribution center 300, which has received EKRap (N2, EKRc (IDc, N1)), can decrypt using the public keys KUap and KUc, and in IDc, N1, AP / GW of the building client 100 Obtain an N2 value of EKUs (KUc, KUs, KUap, IDc, N1, N2) to generate and transmit to the authentication server (that is, the authentication module) of the building energy integrated control device 200. The authentication server of the building energy integrated control device 200 decrypts EKUs (KUc, KUs, KUap, IDc, N1, N2) using private keys KRs to obtain KUc, KUs, and KUap.

④ The authentication server of the building energy integrated control device 200 generates a value of N1 + 1 and N2 + 1, which are the values of f (N1) and f (N2), by using a simple function, and EKUap (EKUc (KUs, KUc, N1 +). 1), IDc, KUap, KUs, N2 + 1) is transmitted to the gateway 420.

⑤ The gateway 420, which has received EKUap (EKUc (KUs, KUc, N1 + 1), IDc, KUap, KUs, N2 + 1), uses its own public key KUap to decrypt the EKUc (KUs, KUc, N1 + 1). 1), IDc, KUap, KUs, N2 + 1 Here, the obtained f2 + 1 can be checked whether the packet is correct by comparing the result obtained by applying f (N2) to N2 previously transmitted to the key distribution center 300. Information required by the AP, such as KUs, KUap, is transmitted to the building client 100, and the building client 100 decrypts using the private key KRc, and then checks N1 in the same manner as in the gateway 420, KUs, KUc. Once acquired, key distribution is complete.

FIG. 7 is a view for explaining a user authentication mechanism in the authentication module of the building energy integrated control device shown in FIG. 4. The process of authenticating each user in the state of key distribution using the key distribution center 300 is described. Explain.

① The building client 100 encrypts the random value R1 generated with the ID ID and time possessed by the home gateway public key (KUs) through the RSA encryption method, and stores it as a file (code.txt). Send the file to 420.

② The gateway 420 transmits the file received from the building client 100 directly to the authentication server of the building energy integrated control device 200.

③ The authentication server of the building energy integrated control device 200 obtains IDc and R1 values by decrypting the file with its own private key (KRs), and then compares the registered user ID with the decrypted user ID (IDc2). Then, a new value f (R1), another random value R2, and f (R2) are generated through a function f () which constantly converts the obtained R1 value. Thereafter, the authentication server of the building energy integrated control device 200 generates an authentication number through a random value generated differently according to time, and RSA encrypts a user ID, an authentication number, a public key of the gateway, and an R2 value (code2.txt is generated). ). Then, the authentication server of the building energy integrated control device 200 encrypts the public key (KUc), code2.txt, and f (R2) of the building client 100 with the public key (KUap) of the gateway 420. After that, the result file (code3.txt) is transmitted to the gateway 420.

④ The gateway 420 encrypts the f (R2) value obtained by decrypting code3.txt with its own private key (KRap) with its public key to make a session key (Kap-s), and generates a random value R3. The gateway ID (IDap), code2.txt contents, and R3 are encrypted with the public key KUc of the building client 100. The gateway 420 sends the generated code4.txt to the building client 100.

⑤ The building client 100 decrypts code4.txt received from the gateway 420 with the private key KRc of the building client 100, and then decodes the gateway ID stored in advance in the building client 100 and IDap (IDap2) obtained by decoding. Compare to gateway 420. In addition, the building client 100 compares the user ID IDc stored in the building client 100 with the user ID IDc2 from the authentication server (that is, the authentication module) of the building energy integrated control device 200. The client 100 checks whether the ID transmitted to the authentication server of the building energy integrated control device 200 is returned. In addition, the building client 100 changes the R1 value through the f () function and compares the value with the f (R1) value transmitted from the authentication server of the building energy integrated control device 200 to determine whether the building energy integrated control device matches. (Check the authentication server of 2000. After performing the verification process, the building client 100 changes the value of R3 received from the authentication server of the building energy integrated control device 200 through the f () function f (R3). The building client 100 then RSA encrypts the user ID and random values R4 and f (R3) with the public key (KUap) of the gateway 420 received from the authentication server of the building energy integrated control device 200. The generated code6.txt file is transmitted to the gateway 420.

⑥ The gateway 420 receives the code6.txt file from the building client 100 and decrypts it with its own private key (KRap). Thereafter, the gateway 420 changes the previously generated R3 value to the f () function and checks the f (R3) value obtained from the building client 100 and the f (R3) value generated by the AP. Check it. In addition, the gateway 420 checks the building client once again through the user ID obtained from the building client 100 and the user ID registered in the gateway. The gateway 420 checks the building client and changes the R4 received from the building client 100 through the f () function to change the value f (R4) along with the ID of the building client (ie, the gateway). The code7.txt file generated by encrypting by RSA encryption method through the public key (KUc) of 100) is transmitted to the building client 100.

⑦ The building client 100 checks the gateway by decoding code7.txt with the private key KRc, comparing the ID of the gateway 420 with the value of f (R4). Thereafter, the building client 100 encrypts the f (R1) value with its public key KUc to generate the session key Kc-s. The building client 100 extracts a value from the password table PWTB stored in the building client 100 through an authentication number (AN) obtained by decrypting a code4.txt file before generating a session key. Thereafter, the building client 100 encrypts the extracted PW and the R2 value previously received from the authentication server of the building energy integrated control device 200 with MD5, and stores the value, the session key (Kc-s), and the user ID. The public key (KUs) of the authentication server of the building energy integrated control device 200 is encrypted using the RSA encryption method. The building client 100 transmits the generated code9.txt file to the gateway 420.

⑧ The gateway 420 integrates the code10.txt file generated by encrypting the contents of the code9.txt and the session key (Kap-s) with the public key (KUs) of the authentication server of the building energy integrated control device 200. Send to the authentication server of the control device 200.

⑨ The authentication server of the building energy integrated control device 200 decrypts code10.txt and code9.txt with private keys (KRs) to check the user's ID. In addition, the authentication server of the building energy integrated control device 200 generates a session key by encrypting R1 and R2 with the stored KUc and KUap, and then compares the session keys received from the building client 100 to the building client 100. Check the gateway 420. Finally, the authentication server of the building energy integrated control device 200 extracts the password PW from its PWTB based on the authentication number AN previously generated. The authentication server of the building energy integrated control device 200 compares the extracted PW and R2 values together with the values from the building client 100 by comparing the result of the MD5 with the value from the building client 100. After encryption through the code11.txt generated to transmit to the gateway 420.

The gateway 420 transmits the code11.txt file to the building client 100. The building client 100 decrypts code11.txt into KRs and outputs an authentication message.

FIG. 8 is a flowchart illustrating access control in the access policy module of the building energy integrated control device shown in FIG. 4, and FIG. 9 is a detailed flowchart of the access control determination step of FIG. 8.

When a service request occurs, the access policy module 90 determines whether to allow access based on the access control policy and environment information set by the access policy security manager 112, and performs access control accordingly and writes to a log file. Save it. Preferably, the execution policy for the access control result is as follows. For example, if access is granted, the administrator is notified according to the control of building energy integrated control service, provision of the corresponding service, and policy. On the contrary, if access is denied, a denial of service message is sent to the user, a log file is recorded, and an alert is sent to the administrator.

In detail, the access control determination step of Figure 8, as shown in Figure 9 access receiving step for receiving an access request from the user inside / outside the building, a policy search step for searching all access control policies corresponding to the request, and Based on this, it can be divided into access permission decision step to decide whether to allow access. In the case of the access receiving step, when the access request is received, a user ID, an object to be accessed, and corresponding operation information (or object class information) are extracted from the access request message. Based on the extracted information, the policy retrieval step retrieves all applicable access control policies, and in the access permission determination step, access permission is determined based on the retrieved result.

The access control performing step of FIG. 8 performs the access control result and includes a function of providing the requested service rather than simply processing whether to allow or deny access. The simplest access control is to deny access, which is to deny the request and return the result to the user, and write it to a log file. In the case of allowing access, various services should be supported depending on the access service.

If it is determined that a series of actions related to building energy integration control need to be stored in a separate log file, the results should be stored in a log file. The necessity determination is based on the security policy set by the security manager 112 of the building energy integrated control device 200. The result of access control and service related information may affect the access control that will occur later. For example, it is necessary to calculate and maintain the service usage time in order to implement a policy of limiting the time of using a specific service for a certain period of time.

Next, the operation of the integrated building energy control according to the embodiment of the present invention will be described with reference to the flowchart of FIG. 10. Since user authentication, intrusion detection, and the like have been described above sufficiently, only the operation of setting a security policy for each building use (ie, an access control policy) will be described in order to achieve efficient access control for integrated energy management.

First, the access policy security manager 112 checks whether a specific user or a specific building intended to set a security level exists through his terminal (S10).

If there is no use of a specific user or a specific building, the access policy security manager 112 generates a use of a specific user and a specific building by operating its own terminal (S12). The information of the specific user and the purpose of the specific building generated thereby is registered by the policy security management module 110 in the policy database 96 through the security management agent 98 in the access policy module 90 (S14). In this way, the use of a specific user or a specific building exists.

Then, access policy security manager 112 selects the use of a specific user and / or a specific building (S16).

Thereafter, the access policy security manager 112 checks whether there is a security level to be applied for the use of the specific user and / or the specific building (S18).

If the security level to be applied does not exist, the access policy security manager 112 generates a security level (S20). The security level information thus generated is registered by the policy security management module 110 in the policy database 96 through the security management agent 98 in the access policy module 90 (S22). An example of classification of the security level according to the importance of the building use registered in the policy database 96 is shown in Table 1 below.

Classification (policy)
Classification (certification)
Classification (building)


C grade
Security level (L)

ID / PW
Detached house, neighborhood living facility, animal and plant management facility, manure and garbage disposal facility, cemetery related facility


Class B
Security level (M)

Certificate based
Apartment houses, sports facilities, lodging facilities, amusement facilities, automobile-related facilities, tourism rest facilities


A grade
Security level (H)


ID / PW + Certificate Based
(Integrated authentication)
Cultural and assembly facilities, sales and sales facilities, medical facilities, education and welfare facilities, business facilities, factories, warehouse facilities, dangerous goods storage and processing facilities, public facilities

Then, the access policy security manager 112 selects a security level (S24). In this way, among a plurality of security levels in which access to a plurality of building energy related devices is set differently for a specific user. A mandatory access setting is made in which a specific security level is set.

Subsequently, a random access setting for all or some of the plurality of building energy related devices is made for a specific user (S26). It is to be understood that the random access setting is made when necessary.

The setting by the random access setting is registered in the policy database 96 by the policy security management module 110 through the security management agent 98 in the access policy module 90 (S28).

FIG. 11 is a flowchart illustrating data and operations transmitted and received between a terminal of a security policy manager and a security server of a building energy integrated control device in the description of a method for integrated control of building energy according to an embodiment of the present invention.

The access policy security manager 112 transmits a message requesting information about a security policy for each user through its terminal to the security server of the building energy integrated control apparatus 200 (S100).

Accordingly, the security server of the building energy integrated control device 200 transmits the corresponding security policy to the terminal of the access policy security manager 112 (S102).

The access policy security manager 112 sets a security policy for a specific user by using the received information about the security policy for each user (S104). Here, the setting of the security policy includes the modification and deletion as well as the creation of a new security policy for a specific user.

Subsequently, the access policy security manager 112 transmits the set security policy to the security server of the building energy integrated control apparatus 200 through its terminal (S106).

The security server of the building energy integrated control device 200 applies the received security policy (S108). That is, the security server of the building energy integrated control device 200 updates the received security policy to the policy database 96.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims. You must see.

10, 80: password module 20, 60: authentication module
30, 120: intrusion detection module 40: user browser or terminal
50: alarm unit 90: access policy module
100: Building Client 110: Policy Security Management Module
200: building energy integrated control device 300; Key Distribution Center

Claims (27)

As a building energy integrated control method in a server / client structured building energy integrated control device,
Setting a security level among a plurality of security levels and assigning the security level to the user, and setting and granting access to a plurality of building energy related devices to the user differently; And
And resetting whether the user is allowed to access some or all of the plurality of building energy related devices. The method according to claim 1,
And the plurality of security levels are classified according to building use. The method according to claim 1,
Building energy integration control method, characterized in that each of the plurality of security levels are applied with a different authentication scheme. The method according to claim 1,
Building energy integration control method further comprising the step of authenticating for the user. The method according to claim 1,
And performing the service request from the user based on the access control policy generated by the security level setting step and the access permission reset step. The method according to claim 5,
The access control policy execution step,
Determining whether to allow access of the user based on the access control policy upon receiving a service request from the user; And
And performing contents according to an access control policy for the user determined as the permission to access the building energy. The method of claim 6,
Determining whether to allow the user access,
Receiving an access request message from the user;
Extracting a user ID, a target to be accessed, and corresponding operation information from the access request message; And
And searching for all corresponding access control policies based on the extracted information to provide search contents. The method according to claim 5,
The access control policy execution step,
Building access control method characterized in that the denial of the access request and performing a denial of service message to the user when performing the access denial. The method according to claim 5,
The access control policy performing step may include storing the access request denied information in a log file when performing the access denial. The method according to claim 5,
The step of performing the access control policy, building energy integration control method characterized in that to transmit an alarm to the administrator when performing the access denied. The method according to claim 1,
And storing the access control policy granted to the user by the security level setting step and the access permission reset step. The method according to claim 1,
Building energy integrated control method characterized in that the differentiated authentication policy is defined for each network section according to the network connection with the building energy integrated control device. The method of claim 12,
The authentication policy is a building energy integrated control method characterized in that the authentication between the external terminal and the security gateway of the building energy integrated control device IP authentication, mandatory access control authentication, and a combination of user ID and password authentication. The method of claim 12,
The authentication policy is a building energy integrated control method characterized in that the authentication between the external terminal and the security policy server of the building energy integrated control device to be authenticated by a certificate. The method of claim 12,
The authentication policy is a building energy integrated control method characterized in that the external terminal when using the service of the integrated building energy control device, IP authentication, mandatory access control authentication, and a combination of user ID and password authentication. The method of claim 12,
The authentication policy is characterized in that between the administrator of the building energy integrated control device and the security policy server of the building energy integrated control device, characterized in that a combination of user ID and password authentication, and self-certification authentication in the building, characterized in that the building Energy integration control method. The method of claim 12,
The authentication policy is a building energy integrated control method characterized in that the user ID and password authentication between the user in the building and the security policy server of the building energy integrated control device. The method of claim 12,
The authentication policy is characterized in that the security gateway of the building energy integrated control device is characterized in that the authentication of a combination of IP authentication, mandatory access control authentication, and in-building self-certification authentication when using the service of the building energy integrated control device Building energy integration control method. The method of claim 12,
The authentication policy is a building energy integrated control method characterized in that the user ID and password authentication between the user in the building and the security gateway of the integrated building energy control device to perform authentication. The method of claim 12,
The authentication policy is characterized in that the building energy integrated control method characterized in that between the administrator and the security gateway of the building energy integrated control device to perform a combination of authentication and user authentication of the certificate in the building. The method according to claim 1,
And collecting traffic attack information and determining whether there is an attack and an attack type by using the collected information. As a server / client structured building energy integrated control device,
A policy database configured to assign a security level among a plurality of security levels to a user and to set access permission to a plurality of building energy related devices differently to store access policy information granted to the user;
A policy security management module which generates the access policy information and resets the access permission of the user to some or all of the plurality of building energy related devices; And
And an access control server for determining whether to access a service based on the access policy information with respect to a user who has made a service request. 23. The method of claim 22,
And the plurality of security levels are classified according to building use. 23. The method of claim 22,
Building energy integration control device, characterized in that each of the plurality of security levels are applied with a different authentication scheme. 23. The method of claim 22,
Building energy integrated control device, characterized in that further comprising an authentication module for authenticating the user. 23. The method of claim 22,
And an access control agent configured to perform the access control according to the determination of the access control server and to store the result in a log file. 23. The method of claim 22,
And an intrusion detection module that collects traffic attack information and determines an attack type and attack type using the collected information.

Images