KR20160000477A - Internet of things system having a user access control function based status of service device - Google Patents

Abstract

The present invention relates to an Internet of things (IoT) system having a user authority setting function according to the state of a service terminal, capable of setting service authority of a user by using a user terminal based on a current state of the corresponding service terminal for service requirement from a plurality of user terminals for a random service terminal, and to a method thereof. The IoT system having a user authority setting function according to the state of a service terminal comprises: a plurality of service terminals; a plurality of user terminals; and a gateway which manages the service terminal and a user terminal through web communications. The service terminal provides the state information of the service terminal to the gateway, and performs a corresponding service based on token information including user authority information provided from the user terminal. The user terminal performs a service request corresponding to the corresponding service authority information in the service terminal based on the token information including the service authority information provided from the gateway. The gateway updates the user authority information for the corresponding service terminal based on the state information provided from the service terminal; generates the token information including the user authority information for the service terminal; and provides the token information to the corresponding user terminal.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for setting a user right according to a service terminal status,

[0001] The present invention relates to an object Internet system, in which a service request from a plurality of user terminals for an arbitrary service terminal is set up based on a current state of the corresponding service terminal, thereby facilitating management of the service terminal And to a method for setting a user right according to a service terminal status that enables a user to set a user right.

Recently, "Sangwang Internet", a system for sharing information through connecting wired and wireless networks, is being developed.

Object The Internet is a object space network that forms intelligent relationships such as sensing, networking, and information processing in a collaborative manner, without human intervention, on the three distributed environmental elements of human being and objects and services. Objects The major components of the Internet include not only household appliances in wired and wireless networks, but also human, vehicles, bridges, various electronic equipment, cultural properties, and physical objects that make up the natural environment. It evolves into a concept that interacts with all the information of the world.

Recently, with the development of the Internet of things mentioned above, the technology of Web of Things is attracting attention. The object web technology is configured to perform inter-object communication via the Web by identifying types and intangible resources as Uniform Resource Identifiers (URIs).

However, since the object Internet system does not have a separate central control device and objects are configured to communicate with each other to provide a service, a plurality of users can access a service through a user terminal In the case of performing the request, it is necessary for the service terminal to perform processing for a plurality of service requests more efficiently.

That is, if the processing for a plurality of service requests is not performed smoothly in an arbitrary service terminal, a conflict may occur in processing for a plurality of service requests, resulting in a problem that the service is not properly performed.

[Patent Literature]

1. Korean Patent Laid-Open Publication No. 2014-0050399 (Title of the Invention: Configuration and Method of Anomaly Detection System in Smart Grid AMI Network Environment)

2. Korean Patent Laid-Open Publication No. 2014-0044215 (entitled " Server Authentication Method for Remote Controllable Smart Device via Internet "

Accordingly, it is an object of the present invention to provide a system and method for setting a service authority of a service terminal based on a current state of a corresponding service terminal in response to a service request from a plurality of user terminals for an arbitrary service terminal, The object of the present invention is to provide a object Internet system and a method thereof, which have a function of setting a user authority according to a state of a service terminal, which facilitates management and enables a user to more efficiently use a service through a service terminal.

According to an aspect of the present invention, there is provided an Internet service provider (ISP) including a plurality of service terminals, a plurality of user terminals, and a gateway for performing a management process for the service terminals and the user terminals through web communication. Wherein the service terminal is configured to provide its own status information to the gateway and to perform a service requested from the corresponding user terminal based on token information including user authority information provided from the user terminal, The user terminal is configured to perform a service request corresponding to the service right information to a target service terminal based on token information including service right information provided from the gateway, To the corresponding service terminal And to generate the token information including the user right information for the service terminal and to provide the token information to the corresponding user terminal. The service providing terminal according to claim 1, System is provided.

In addition, the service terminal and the gateway perform CoAP / UDP communication, and the user terminal and the gateway perform HTTP / TCP communication. do.

The gateway is configured to provide an encryption key to the service terminal and the user terminal and perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. There is provided a object Internet system having a function of setting a user authority according to the Internet.

Also, the gateway is configured to provide the token information to the corresponding user terminal and the service terminal, respectively. The object Internet system having the user authority setting function according to the service terminal state is provided.

The gateway may be configured to generate random number information and to further include the random number information in the token information. The service terminal may further include random number information of the token information provided from the user terminal and a random number of the token information corresponding to the user terminal provided from the gateway And the user terminal is configured to perform authentication processing for the user terminal by comparing the information with the user terminal.

In addition, the gateway is configured to include a user authority setting table for the service terminal, and the user authority setting table is configured to store the authority state of a plurality of user terminals for each service state for a plurality of service terminals, Information is set to be divided into a ready state, an execution state, and an end state. The object Internet system having a user authority setting function according to a service terminal state is provided.

In addition, the user rights setting table is divided into access (C), read (R), update (U), and delete (D) access items for the ready state, And a user authority setting function according to a service terminal state.

In addition, the access status information is set to "1" in the state where the rights can not be set and "0" Object Internet system having a setting function is provided.

In addition, the token information provided to the service terminal and the user terminal in the gateway is a one-time temporary token, and the object Internet system having the user authority setting function according to the service terminal state is provided.

According to another aspect of the present invention, there is provided a service providing system including a plurality of service terminals, a plurality of user terminals, and a gateway for performing management processing on the service terminals and the user terminals through web communication, The method comprising: a first step of storing service authorization status information for a user terminal corresponding to service status information provided from the service terminal, the method comprising the steps of: A second step of performing a service setting request for the service terminal, a service permission information settable on the basis of the current status information of the service terminal which is requested to be set up in the gateway, the token information And provides it to the corresponding user terminal A third step of providing service request information including the token information provided from the user terminal through the gateway to the corresponding service terminal, and performing a service corresponding to the service request provided from the user terminal in the service terminal And a sixth step of providing status information on the service terminal to the gateway and updating the service permission status information of the service terminal in the gateway. A method of setting a user authority is provided.

The gateway is configured to provide an encryption key to the service terminal and the user terminal and perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. There is provided a method of setting a user authority of the Internet system.

The second step may include a step 21 of transmitting service setting request information from the user terminal to the gateway, a step 22 of providing at least one service terminal information corresponding to the service setting request in the gateway to the corresponding user terminal, And selecting the desired service terminal from the user terminal and providing the corresponding service terminal selection information to the gateway. In the third step, the gateway performs the corresponding service provided from the user terminal in step 23, And generating the token information based on the state information about the terminal. The method of setting a user right of the object Internet system according to the service terminal state is provided.

The third step may include generating the random number information in the gateway, generating the token information further including the random number information generated in step 31, and providing the generated token information to the corresponding service terminal and the user terminal, respectively Wherein the service terminal performs an authentication process for the user terminal based on the random number information included in the token information provided from the user terminal in the fifth step, There is provided a method of setting a user right of the object Internet system according to the state.

In the first step, the service status information provided from the service terminal to the gateway includes Create (C), Read (R), Update (U), Delete (D) And access status information of at least one of the access terminal and the access terminal.

In the first or sixth step, the gateway is set to "1" for the state in which the rights can not be set while the current service is being performed for the state of each service terminal, and is set to "0" The method comprising the steps of: (a) receiving a service request from a service provider;

In the fourth step, the gateway provides the one-time temporary token information to the service terminal and the user terminal. A method of setting a user right of the object Internet system according to the service terminal state is provided.

According to the present invention, the gateway manages the status information of the service terminal and sets the service right for the user terminal so as to correspond to the current status of the service terminal. Thus, it is possible to easily manage the service terminal, It is possible to provide an object internet system that can prevent a service conflict from occurring when a user terminal makes a service request.

In addition, the gateway provides the one-time temporary token including the random number and the service right information to the service terminal and the user terminal for the service terminal and the user terminal, and performs authentication for the user terminal based on the random number information at the service terminal Thus, it is possible to provide an Internet object system capable of preventing hacking by a third party having a malicious purpose.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram showing a schematic configuration of an Internet object system having a user authority setting function according to a service terminal status according to a first embodiment of the present invention; FIG.
FIG. 2 is a block diagram showing the internal structure of the gateway 300 shown in FIG. 1 functionally separated. FIG.
FIG. 3 illustrates token information generated by the token generator 340 shown in FIG. 2. FIG.
4 is a diagram illustrating a user rights setting table of the user terminal 200 according to the state of the service terminal 100 stored in the data memory 350 shown in FIG.
5 is a diagram for explaining an operation of a things Internet system having a user authority setting function according to the service terminal status shown in FIG.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram illustrating a schematic configuration of a toll Internet system having a user authority setting function according to a service terminal status according to a first embodiment of the present invention. Referring to FIG.

As shown in FIG. 1, the object Internet system having a user authority setting function according to the service terminal status according to the present invention includes a plurality of first terminals, that is, a service terminal 100 and a plurality of second terminals, that is, a user terminal 200 And a gateway 300 for performing management processing on the service terminal 100 and the user terminal 200 through web communication.

At this time, the service terminal 100 is a terminal performing a service, and the user terminal 200 is a terminal requesting a service. It should be noted that the user terminal 200 is not necessarily limited to a terminal that requires a service by a user's operation. For example, the user terminal 200 may be a form requiring automatic service according to a predetermined operation program, that is, a sensor or a terminal controlled to request a service remotely.

The service terminal 100 provides the service status information to the gateway 300 in real time and provides the service status information to the gateway 300 based on the token information including the service right information provided from the user terminal 200 And the like.

The user terminal 200 is configured to perform a service request corresponding to the right information to the target service terminal 100 based on the token information including the service right information provided from the gateway 300.

The gateway 300 generates token information including the right information corresponding to the service status information of the corresponding service terminal 100 based on the status information provided from the service terminal 100, And the user terminal 200 as shown in FIG. At this time, the gateway 300 may provide the token information only to the user terminal 200, and configure the gateway 300 to perform the service request to the target service terminal 100 in the user terminal 200.

The gateway 300 allocates an encryption key, for example, a symmetric key to the service terminal 100 and the user terminal 200, and then transmits a predetermined symmetric key at the time of communication between the service terminal 100 and the user terminal 200 So as to perform encryption and decryption processing. For example, the gateway 300 may perform encryption and decryption processing using an encryption algorithm such as AES (Advanced Encryption Standard) or lightweight high-speed block encryption (LEA).

Also, the gateway 300 may be implemented as a smart access point (AP), performs CoAP / UDP communication with the service terminal 100, and performs HTTP / TCP communication with the user terminal 200 . Here, the CoAP (Constrained Application Protocol) is an application layer protocol developed for use in a system where a service terminal is restricted, and has a simple property of converting to HTTP. In addition, both the HTTP and the CoAP support REST (Representational State Transfer), and the gateway 300 can set the authority for the user terminal 200 using the REST method. That is, according to the present invention, the user terminals 200 for the four access items of Create (C), Read (R), Update (U), and Delete (D) Quot; is set. Here, the Create (C) is an item for performing processing such as setting and registering data, for example, Read (R) is an item for performing data read processing, and Update (U) Delete (D) may be an item for deleting data, for example.

 FIG. 2 is a block diagram showing the internal structure of the gateway 300 shown in FIG. 1 functionally separated.

2, the gateway 300 includes an information input / output unit 310, a wireless processing unit 320, an encryption key generating unit 330, a token generating unit 340, a data memory 350, and a controller 360 ).

The information input / output unit 310 includes input means for an administrator to input various information to the gateway 300 and display means for displaying and outputting status information of the gateway 300. [ At this time, the administrator performs registration processing of various information including setting of user right information corresponding to the state of the service terminal 100, registration of an encryption algorithm for generating an encryption key, etc. through the information input / output unit 310 . The information input / output unit 310 receives information requested by the administrator from the control unit 360, and outputs the information. At this time, the information input / output means 310 is not necessarily provided on the gateway 300, and input and output processing of such information may be performed through another terminal located at a remote place through a communication network.

The radio processing unit 320 performs radio communication with the service terminal 100 and the user terminal 200. At this time, the wireless processing unit 320 performs web communication based on the CoAP / UDP protocol with the service terminal 100, and web communication based on the HTTP / TCP protocol with the user terminal 200.

The encryption key generation unit 330 generates an encryption key for performing an authentication process for the service terminal 100 and the user terminal 200. [ At this time, the encryption key generating unit 330 generates a symmetric key.

The token generating unit 340 generates token information including a user terminal identification code and user authority information. At this time, the user terminal identification code may be an identification code assigned when the user terminal is registered. Also, the token generating unit 340 may generate a random number and generate token information including the random number information. That is, the token information may include a user terminal identification code, a random number, and user right information (CRUD info.) As shown in FIG. At this time, the random number is a one-time random number, and the token information can be used as a one-time temporary token. This is used for authentication and service requests from the user terminal 200 to the service terminal 100, and is used as a one-time temporary token, thereby preventing the risk of hacking by a malicious third party In order to make it possible.

The data memory 350 stores registration information including an identification code for the service terminal 100 and the user terminal 200 registered for service provision and registration information including identification codes for the service terminal 100 and the user terminal 200 Related information including encryption key information, status information of each service terminal 100, and permission setting information for the user terminal 200 corresponding to the service terminal 100 status information.

At this time, the rights setting information corresponding to the status information of the service terminal and the service terminal status information may be configured in the form of a table as shown in FIG. That is, as shown in FIG. 4, the user authority setting table according to the state of the service terminal 100 includes a status information about the first to m-th service terminals 100 ₁ to 100 m registered in the preparation state / execution state / (C), Read (R), Update (U), and Delete (D), and the first to n-th service requests Quot; 1 "or" 0 "for the service authorization state 351 for the user terminals 200 ₁ to 200n. Here, the ready state is a state of waiting for a service request to the service terminal 100, an execution state is a state of performing a specific service, and an end state means an inaccessible state in which a service request can not be performed. For example, in FIG. 4, the first user terminal 200 _{1 of} the first service terminal 100 ₁ is in a state where a service is being performed with a "C / R / U / D"Quot; C / R "authority is given to the state and the service is being performed. Also, with respect to the first service terminal 100 ₁ , the second user terminal 200 ₂ is in a state in which the service is being performed with an "R" right granted to the ready state and a "C / R" And the service is being performed. That is, when the first user terminal 200 ₁ is granted the "C / R / U / D" right to the ready state with respect to the first service terminal 1001 and the service is being performed, Quot; / D "access item performs data setting / update / deletion processing, so that modification or change of data occurs. Therefore, the second user terminal 200 ₂ does not perform data read / Quot; R "access item. This method of setting the user authority can be arbitrarily changed and set by the administrator according to the characteristics of the service terminal, the communication environment, and the like.

The control unit 360 performs a series of registration processing such as giving an identification code to the service terminal 100 and the user terminal 200 requested to affiliate in order to provide the service, And the encryption key to the user terminal (200). In addition, the controller 360 configures and stores a user authority setting table of the type shown in FIG. 4 based on the service status information provided from the service terminal 100, When there is a service request for the terminal 100, it can check the settable authority information based on the user authority setting table (see FIG. 4) corresponding to the current status information of the corresponding service terminal 100, And provides the generated token information to the corresponding service terminal 100 and the user terminal 200. At this time, the control unit 360 updates the service status information provided from the service terminal 100 in real time.

Next, the operation of the object Internet system having the user authority setting function according to the service terminal status having the above-described configuration will be described with reference to FIG. Hereinafter, the operation of the object Internet system having the function of setting the user authority according to the service terminal state based on the status of the service requested from the first and second user terminals 200 ₁ and 200 _{2 to} the first service terminal 100 ₁ .

First, the administrator sets and registers a user authority setting method according to the service status of the service terminal 100 through the gateway 300 in advance. At this time, the authority setting method may be arbitrarily set by the administrator.

The service terminal 100 and the user terminal 200 requesting to provide the service according to the present invention perform a service registration request to the gateway 300 and the gateway 300 transmits the service registration request to the corresponding service terminal 100 and the user 300. [ By assigning an identification code and an encryption key, that is, a symmetric key, to the terminal 200, a series of service registration processing is performed.

In the above state, the service terminal 100 (for example, the first service terminal 100 ₁ ) that has processed the service registration provides its current service status information to the gateway 300 (ST1). At this time, when the first service terminal 100 ₁ performs a service for a service request from the user terminal 200, the first service terminal 100 ₁ provides service status information to the gateway 300 in real time. Here, the first service terminal 100 ₁ provides the service status information including the identification code of the service terminal 100 ₁ , the user terminal identification code requested to perform the service, and the service provision status information to the gateway 300. At this time, the service provision state information includes state type information and access item information (see FIG. 4). Also, the first service terminal 100 ₁ encrypts the service status information using the symmetric key allocated from the gateway 300, and wirelessly transmits the service status information to the gateway 300 according to the CoAP / UDP protocol.

The gateway 300 performs a decoding process using a predetermined symmetric key based on the service status information provided from the first service terminal 100 ₁ , and when the decoding process is normally completed, the gateway 300 transmits the received service status information And updates the authorization status information of the service authorization setting table of the type shown in FIG. That is, the authorization status information for the user terminal 200 is changed from "0" to "1" based on the service provision status information for the user terminal 200 provided from the first service terminal 100 ₁ , Change from "1" to "0".

When a service setting request is made from the first user terminal 200 ₁ to the gateway 300 (ST 2), the gateway 300 transmits the registered service corresponding to the service type requested from the first user terminal 200 ₁ And provides the terminal 100 information to the first user terminal 200 ₁ (ST 3). At this time, the first user terminal 200 ₁ encrypts the service setup request information using the symmetric key allocated from the gateway 300, and provides the encrypted service setup request information to the gateway 300 according to the HTTP protocol. the first user terminal using the symmetric key, predetermined with respect to (200 ₁₎ performing the decoding process a service setting request information, and, when the decoding process is completed normally provides a first user terminal (200 ₁₎ services the terminal information to. At this time, the gateway 300 may provide the service terminal information including the service terminal identification code and the current status information to the first user terminal 200 ₁ .

Then, the first user terminal 200 ₁ selects a desired service terminal, for example, a first service terminal 100 ₁ among at least one service terminal information provided from the gateway 300, and transmits the selected first service terminal 100 ₁ ) service terminal selection information including the identification code to the gateway 300 (ST4).

The gateway 300 transmits presently settable authority state information corresponding to the current state of the corresponding service terminal, that is, the first service terminal 100 ₁ , based on the service terminal selection information provided from the first user terminal 200 ₁ Generates a temporary token of the type shown in FIG. 3 including the settable authority information, the user terminal identification code, and the one-time random number, and provides the temporary token to the first user terminal 200 ₁ and the first service terminal 100 ₁ , respectively (ST5, ST6). For example, the right setting information for the first service terminal 100 ₁ may be set as the right information for all access items of "C / R / U / D ".

Thereafter, the first user terminal 200 ₁ performs a first service request through the HTTP protocol to the first service terminal 100 ₁ (ST 7). At this time, the first user terminal 200 _{1 transmits} the service request information for a desired access item among the "C / R / U / D" access items, which are set on the basis of the temporary token information provided from the gateway 300, To the service terminal 100 ₁ . For example, the first user terminal 200 ₁ can request service of the "POST" access item, that is, the "C" access item, to the first service terminal 100 ₁ . At this time, the first user terminal 200 ₁ is compatible with the HTTP method and the REST method for the access item, and Table 1 shows this.

HTTP POST GET PUT DELETE REST Create Read Update Delete

Meanwhile, the first service terminal 100 ₁ performs a service based on the service request information provided from the first user terminal 200 ₁ (ST 8). At this time, the first service terminal 100 ₁ compares the temporary token information provided from the first user terminal 200 ₁ with the temporary token information corresponding to the previously stored user terminal in step ST 7, And performs service processing. That is, the first service terminal 100 _{1 transmits} the user terminal identification code of the user temporary token information provided from the first user terminal 200 ₁ , and the corresponding temporary token information provided from the gateway 300 in step ST 6 Reads the temporary token information including the user terminal identification code, and compares the random number information included in the temporary token information to perform authentication processing on the first user terminal 200 ₁ .

In addition, the first service terminal 100 ₁ performs a service provided from the first user terminal 200 ₁ and transmits current service status information according to the service execution to the gateway 300 (ST 9). At this time, the first service terminal 100 _{1 transmits the} C / R / U / D included in the temporary token information to the gateway 300. Also, the gateway 300 updates the user authority setting table based on the service status information provided from the first service terminal 100 ₁ .

As described above, in the state in which the first service terminal 100 ₁ performs a service requested from the first user terminal 200 ₁ , the second service terminal 100 _{2 transmits} the service request from the second user terminal 200 ₂ to the gateway 300, If so the service request to the (100 ₁₎ (ST10), the gateway (300) and sets the service rights for the first the second user terminal based on the current status information of the service terminals (100 ₁₎ (200 ₂₎ , Generates a temporary token based on the generated token, and provides it to the first service terminal 100 ₁ and the second user terminal 200 ₂ (ST 11, ST 12). For example, the first for the service terminal (100 _1), the first user terminal _{(200 1) "C / R} / U / D" permission is set bar, the second user terminal for the (200 ₂₎ "GET "That is, only the authority for the" R "access item is set.

Thereafter, the second user terminal (200 ₂₎ comprises performing a second service request to the first service station (100 _1), a first service station (100 ₁₎ to the second user terminal based on the temporary token information (200 ₂ ), And performs a second service corresponding to the service right, for example, a "GET" service (ST13). In addition, the first service terminal 100 ₁ provides the service status information to the gateway 300, and the gateway 300 performs a series of procedures for updating the user authority setting information based on the service status information (ST 14 and ST 15) .

That is, according to the above embodiment, the gateway performs security processing for the service terminal and the user terminal by providing the encryption key to the service terminal and the user terminal, and manages the status information for the service terminal to correspond to the current state of the service terminal So as to set the service authority for the user terminal. Accordingly, it is possible to prevent a service conflict from occurring when a plurality of user terminals make service requests to arbitrary service terminals.

In addition, the gateway provides the service terminal and the user terminal with a temporary token including the random number and the service right information to the corresponding service terminal and the user terminal, performs authentication on the user terminal based on the random number information at the service terminal, , And is configured to perform the service based on the service right information. At this time, in the present invention, the use of the temporary token information is limited to one-time, so that hacking by a third party having a malicious purpose can be prevented.

Although the present invention has been described in connection with the above-mentioned preferred embodiments, it is possible to make various modifications and variations without departing from the spirit and scope of the invention. Accordingly, the scope of the appended claims should include all such modifications and changes as fall within the scope of the present invention.

100: service terminal, 200: user terminal,
300: gateway, 310: information input / output unit,
320: radio processing unit, 330: encryption key generating unit,
340: Token generating unit, 350: Data memory,
360: Control section.

Claims (16)

There is provided a object Internet system including a plurality of service terminals, a plurality of user terminals, and a gateway for performing management processing on the service terminal and the user terminal through web communication,
Wherein the service terminal is configured to provide its own status information to the gateway and to perform a service required from the corresponding user terminal based on token information including user authority information provided from the user terminal,
Wherein the user terminal is configured to perform a service request corresponding to the service right information to a target service terminal based on token information including service right information provided from the gateway,
The gateway updates the user right information for the corresponding service terminal based on the status information provided from the service terminal and generates token information including the user right information for the service terminal and provides the generated token information to the corresponding user terminal And a user authority setting function according to a service terminal status. The method according to claim 1,
Wherein the service terminal and the gateway perform CoAP / UDP communication, and the user terminal and the gateway perform HTTP / TCP communication. The method according to claim 1,
Wherein the gateway is configured to provide an encryption key to the service terminal and the user terminal and perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. Object Internet system with permission setting function. The method according to claim 1,
Wherein the gateway is configured to provide the token information to the corresponding user terminal and the service terminal, respectively. 5. The method of claim 4,
Wherein the gateway is configured to generate and to include random number information in the token information,
Wherein the service terminal is configured to perform authentication processing for the user terminal by comparing the random number information of the token information provided from the user terminal with the random number information of the token information corresponding to the user terminal provided from the gateway, An object Internet system having a user authority setting function according to a state. The method according to claim 1,
Wherein the gateway comprises a user authority setting table for the service terminal,
Wherein the user rights setting table is configured to store an authorization state of a plurality of user terminals for each service state for a plurality of service terminals, wherein the service state information is divided into a ready state, an execution state, and an end state, An object Internet system having a user authority setting function according to a state. The method according to claim 6,
The user rights setting table is divided into access (Create), read (R), update (U), and delete (D) access items for the ready state, the execution state and the end state of each service terminal An object Internet system having a user authority setting function according to service terminal status. The method according to claim 6,
Wherein the authorization status information is set to "1" for a state in which the rights can not be set and "0" . The method according to claim 1,
Wherein the token information provided to the service terminal and the user terminal in the gateway is a one-time temporary token. There is provided a method of setting a user authority of a object Internet system including a plurality of service terminals, a plurality of user terminals, and a gateway for performing management processing on the service terminal and the user terminal through web communication,
Wherein the gateway stores service permission status information for a user terminal corresponding to service status information provided from the service terminal,
A second step of performing a service setup request to the arbitrary service terminal from the user terminal to the gateway,
The method comprising the steps of: confirming configurable service entitlement information based on current state information of a service terminal that is requested to be set up in the gateway, generating token information including configurable service entitlement information,
A fourth step of providing service request information including token information provided from the user terminal through the gateway to a corresponding service terminal,
A fifth step of performing a service corresponding to a service request provided from a user terminal at the service terminal,
And a sixth step of providing status information on the service terminal to the gateway by the service terminal and updating the service permission status information for the service terminal in the gateway. 11. The method of claim 10,
Wherein the gateway is configured to provide an encryption key to the service terminal and the user terminal and to perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. How to set user rights on the Internet system. 10. The method of claim 9,
The second step includes a step 21 of transmitting service setting request information from a user terminal to a gateway,
A step 22 of providing at least one service terminal information corresponding to a service setup request in the gateway to a corresponding user terminal,
And selecting the desired service terminal from the user terminal and providing the selected service terminal selection information to the gateway,
Wherein the gateway is configured to generate the token information based on the status information about the corresponding service terminal provided from the user terminal in the step 23 in the gateway. How to set it up. 13. The method according to claim 10 or 12,
The third step includes a step 31 of generating random number information in the gateway,
Generating the token information including the random number information generated in operation 31, and providing the generated token information to the corresponding service terminal and the user terminal, respectively,
Wherein the service terminal performs the authentication process for the corresponding user terminal based on the random number information included in the token information provided from the user terminal in the fifth step. How to set permissions. 11. The method of claim 10,
In the first step, the service status information provided from the service terminal to the gateway is transmitted to the gateway through the Create (C), Read (R), Update (U), and Delete (D) The method of claim 1, wherein the at least one status information comprises at least one of status information of the at least one service terminal. The method according to claim 10 or 14,
In the first or sixth step, the gateway is configured to set the state where the rights can not be set to "1" and the state where the rights can be set to "0" while the current service is being performed for the state of each service terminal in the gateway A method of setting a user right of a thing Internet system according to a service terminal status. 11. The method of claim 10,
Wherein the fourth step is to provide one-time temporary token information to the service terminal and the user terminal in the gateway, according to the service terminal state.

Images