KR20160067537A - Apparatus and storage medium for access control based on pattern recognition - Google Patents

Abstract

The present invention relates to an apparatus and a method for controlling access based on pattern recognition, which recognize a pattern image from a captured image of a gate locking apparatus, using augmented reality technology, and authenticate the gate locking apparatus and a user who passes through the gate locking apparatus using the recognized pattern image. A terminal performs first authentication by comparing a pattern image recognized from a photographed image of the gate locking apparatus with a previously stored pattern image of a user defined pattern. A security service apparatus receives user identification information, the photographed image, and the pattern image that passed the first authentication from the terminal, and performs second authentication by comparing the same with previously registered account information. The security service apparatus performs third authentication by comparing a password inputted from the terminal with the account information.

Description

[0001] Apparatus and recording medium for access control based on pattern recognition [0002]

The present invention relates to a device for access control based on pattern recognition and a recording medium therefor, and more particularly, to a device for recognizing a pattern image from a photographed image of an opening / closing device using an augmented reality technique, And an apparatus and a recording medium for access control based on pattern recognition for authenticating a user entering and exiting through the opening and closing device.

In recent years, with the introduction of an open OS, a smart phone combining a high function of a PC with a mobile phone has become popular, and various attempts have been made to utilize a high-function and high-performance smart phone.

In particular, with the development of micro-fabrication technology, advanced sensors become smaller and cheaper, and more sensors can be mounted on smart phones, and intelligent applications utilizing such sensors, such as augmented reality and 3D games, are being developed .

The Augmented Reality (AR) is a technology for converging and providing contents including static, dynamic, visual, and auditory elements, which can not be seen in the real world, to the image information of the real world photographed in real- (Pattern or mark) included in the image, and superimposes digital contents such as an image, a moving image, a sound, and a 3D model on the image based on the recognized object (pattern or mark) do. Such augmented reality is applied to various fields such as game, education, and service.

Meanwhile, for the purpose of crime prevention and security, a security service that permits access by confirming the access right of a person who intends to access is used. At this time, as a method for confirming a user, there is a method of inputting a predetermined password, User recognition technology based on biological information such as recognition technology, fingerprint recognition technology and iris recognition technology, and NFC (Near Field Communication) technology are used.

However, there is no attempt to apply augmented reality to such access control systems.

Korean Patent Laid-Open No. 10-2005-0109338, November 21, 2005 (Name: door lock security system using human recognition)

The present invention is a device for recognizing an access right of a person who wants to enter and controlling entrance and exit, recognizing a pattern image from a photographed image of the opening / closing device using an augmented reality technique, and using the recognized pattern image, And to provide a device and a recording medium for access control based on pattern recognition for authenticating a user entering and exiting through the network.

As a means for solving the above-mentioned problems, the present invention provides an image capturing apparatus, comprising: an image capturing module for capturing an image captured by a camera; An image processing module for recognizing a pattern image from the photographed image and comparing the recognized pattern image with a pattern image of a previously stored user defined pattern to perform first authentication; If the primary authentication is successful, the user identification information together with the photographed image and the first authenticated pattern image is transmitted to the security service apparatus controlling the opening / closing apparatus, and the photographed image and the first authenticated pattern A server interworking module for receiving the secondary authentication result based on the user identification information together with the image and for requesting the tertiary authentication to transmit the password input to the security service device when the secondary authentication is successful; And a user interface module for outputting a user interface screen for inputting the password and receiving the password. The present invention also provides an apparatus for access control based on pattern recognition.

According to another aspect of the present invention, there is provided an information processing apparatus including: a storage unit for storing account information for access control based on pattern recognition including user identification information, a password, and a pattern image of an opening / closing apparatus registered for each user; And an image pickup device for receiving the first image pattern image and the user identification information from the terminal and comparing the user identification information and the first pattern image authenticated by the terminal with the account information, And an authentication processor for performing a third authentication by receiving a password from the terminal and comparing the password with the account information to provide a security service device for access control based on pattern recognition .

The security service apparatus may further include an image processing unit for recognizing a pattern image from the received captured image, and the authentication processing unit searches the account information using the received user identification information and the pattern image, And if it is pre-registered information, the secondary authentication can be performed by comparing whether the pattern image matches the received pattern image from the captured image through the image processing unit.

In addition, the security service apparatus may further include an opening / closing device control unit for controlling the opening and closing of the opening and closing device in accordance with the tertiary authentication result.

In addition, the present invention provides, as another solution to the above-mentioned problem, a method comprising: capturing a captured image of an opening / closing device; Recognizing a pattern image from the captured image; Performing a primary authentication by comparing a pattern image of a previously stored user-defined pattern with a matching pattern image; And transmitting the user identification information, the captured image, and the recognized pattern image to the security service device to request secondary authentication if the primary authentication is successful. Receiving a password when the second authentication is successful in the security service device; And transmitting the input password to the security service apparatus to request the third-level authentication.

According to another aspect of the present invention, there is provided a computer readable storage medium storing a computer program for causing a computer to execute a method comprising: storing account information for access control based on pattern recognition including user identification information, a password, Receiving an image of an opening / closing device photographed by the terminal, a first authenticated pattern image and user identification information at the terminal; Performing second authentication by comparing the received user identification information and a first authenticated pattern image with the account information; Receiving a password from the terminal; And performing third authentication by comparing the password and the account information. The computer readable recording medium records the program.

The pattern recognition-based access control technology according to the present invention recognizes the pattern image from the photographed image of the opening / closing apparatus through image processing such as an augmented reality and performs multi-stage authentication based on the pattern image to improve security .

Specifically, the present invention compares a pattern image recognized from a photographed image at a terminal with a pattern image of a previously registered user-defined pattern to first authenticate whether the device is legitimate, that is, an accessable device, and if the first authentication is successful And transmits the recognized pattern image and the photographed image to the security service apparatus together with the user identification information to perform a secondary authentication for confirming the user confirmation and the pattern image through the security service apparatus, It is possible to authenticate a legitimate user and the opening / closing device to / from the user by comparing the password input from the user with the pre-registered password, thereby improving the reliability of access control .

Further, the present invention not only improves the user convenience by combining the augmented reality with access control, but also can reduce the installation cost of the device for user recognition by the opening / closing device by using the terminal carried by the user.

1 is a block diagram schematically showing the overall configuration of an access control system according to the present invention.
2 is a block diagram illustrating the configuration of an access control system according to the present invention.
3 is a block diagram illustrating the configuration of a security service apparatus in the access control system according to the present invention.
4 is a flowchart illustrating a pattern recognition based access control process by the access control system according to the present invention.
FIG. 5 is a flowchart illustrating a pattern recognition-based access control process performed by a terminal in the access control system according to the present invention.
6 is a diagram illustrating an account management table managed by a security service apparatus in the access control system according to the present invention.
7 is a diagram illustrating a data format used in the access control system according to the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description and the accompanying drawings, detailed description of well-known functions or constructions that may obscure the subject matter of the present invention will be omitted. It should be noted that the same constituent elements are denoted by the same reference numerals as possible throughout the drawings.

The terms and words used in the present specification and claims should not be construed to be limited to ordinary or dictionary meanings and the inventor is not limited to the concept of terminology for describing his or her invention in the best way. It should be interpreted as meaning and concept consistent with the technical idea of the present invention. Therefore, the embodiments described in the present specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention, and not all of the technical ideas of the present invention are described. Therefore, It is to be understood that equivalents and modifications are possible.

In addition, when referring to an element as being "connected" or "connected" to another element, it means that it can be connected or connected logically or physically. In other words, it is to be understood that although an element may be directly connected or connected to another element, there may be other elements in between, or indirectly connected or connected.

Also, the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. It is also to be understood that the terms such as " comprising "or" having ", as used herein, are intended to specify the presence of stated features, integers, It should be understood that the foregoing does not preclude the presence or addition of other features, numbers, steps, operations, elements, parts, or combinations thereof.

1 is a block diagram schematically showing the overall configuration of an access control system according to the present invention.

1, an access control system according to the present invention includes an opening / closing apparatus 100, a terminal 200, and a security service apparatus 300.

At this time, the terminal 200 and the security service apparatus 300 can be connected to each other using various communication technologies such as wired / wireless Internet, Wi-Fi network, wired / wireless communication network including a mobile communication network as well as wired and wireless local communication such as Bluetooth and Zigbee have.

The security service apparatus 300 and the switching apparatus 100 may be connected through a leased line and may be connected to a wired / wireless Internet, a Wi-Fi network, a mobile communication network , As well as wired / wireless local area communication such as Bluetooth and Zigbee.

The open / close device 100 refers to a device that is opened or closed by a control signal transmitted from the security service device 300. The opening and closing apparatus 100 may include a structure implemented to be opened and closed, driving means for driving the structure, and control means for controlling the driving means in communication with the security service apparatus 300 . The structure may be a door, a window, or the like.

The terminal 200 is a portable device carried by a user using the opening and closing apparatus 100, and can be used as any portable user apparatus. For example, the terminal 200 may be a smart phone, a tablet PC, or a portable device separately implemented for access control. In the former case, the terminal 200 includes an apparatus for access control based on pattern recognition according to the present invention, which can be implemented by hardware, software, or a combination of hardware and software, Control functions can be performed. The user captures the opening / closing device 100 using the terminal 200, recognizes the pattern image from the photographed image of the opening / closing device 100 through the augmented reality technique, And performs user authentication in cooperation with each other. Here, the pattern image refers to a pattern that can be extracted from the photographed image of the opening / closing apparatus 100, and is preferably a unique pattern that can be distinguished from other opening / closing apparatuses 100. The pattern image may be, for example, a shape of a structure to be opened or closed, a pattern, a mark attached to the structure, or the like.

The security service apparatus 200 is a server apparatus for authenticating a user through interlocking with the terminal 200 and controlling the opening / closing apparatus 100 according to an authentication result. Specifically, the security service apparatus 200 manages account information for access control for each user, confirms the access right of the user through multilevel authentication in cooperation with the terminal 200, ). In this case, the account information includes account identification information for identifying a user, authentication information such as pattern image information and a password associated with the open / close device 100 available to the user, Authentication by comparing the pattern image extracted from the terminal 200 with the pattern image information registered in the account information, and comparing the password entered from the terminal 200 with the password registered in the account information, have.

The configuration and functions of the components of the access control system according to the present invention, that is, the terminal 200 and the security service device 300 will be described in more detail with reference to FIG. 2 and FIG.

2 is a block diagram illustrating the configuration of an access control system according to the present invention.

2, the terminal 200 includes an input unit 210, an output unit 220, a communication unit 230, a camera unit 240, a storage unit 250, and a control unit 260 can do. The terminal 200 includes a video capture module 261, an image processing module 262, a server interworking module 263, and a user interface module 263 for performing access control based on pattern recognition according to the present invention. 264). The 'module' included in the terminal 200 according to the present invention means a component that is implemented by software or hardware or a combination of software and hardware and performs a certain function described below.

Hereinafter, each component will be described in more detail.

The input unit 210 generates a user input signal corresponding to a character, a number, a symbol, or a command according to a user's operation and transmits the user input signal to the controller 260. The input unit 210 may be realized by various known input means, for example, a keyboard, a key input means such as a keypad, a positioning means such as a mouse, a joystick, a trackball, and a touch pad, , Gesture input means for generating an input signal corresponding thereto, or the like can be used. Particularly, in the present invention, the input unit 210 may be used for inputting a command for operating the camera unit 240 for photographing the opening and closing apparatus 100, a password, and the like.

The output unit 220 is a means for outputting an operation process or a result of performing an operation of the terminal 200 in a form recognizable by a user and may be an LCD, an LED, an ELD, a PDP, an OLED, a laser TV, It can be the same display device. In the present invention, the output unit 220 outputs a user interface screen for outputting an image photographed by the camera unit 240 or for inputting a password and outputting an authentication result provided by the user interface module 264 .

The communication unit 230 is a means for communicating with the security service apparatus 300 and can perform communication according to a connection method with the security service apparatus 300. [ For example, the communication unit 230 may access the mobile communication network or the Wi-Fi AP, transmit data to the security service apparatus 300 through the connected mobile communication network, or transmit data transmitted from the security service apparatus 300 . In addition, the communication unit 230 may be implemented by various known communication methods.

The camera unit 240 is a means for capturing an image of a shape and a color of a subject using light and recording it as an image. The camera unit 240 can capture a moving image as well as an image. In the present invention, the camera unit 240 is used to photograph the opening and closing apparatus 100.

The storage unit 250 is a means for recording a program executed by the control unit 260 or data to be processed, and includes a main memory and an auxiliary memory. For example, the storage unit 250 may include a ROM, a ROM, a hard disk, a Blu-ray disk, a flash memory, a USB memory, and the like. In the present invention, the storage unit 250 of the terminal 200 stores user-defined pattern information 251 used for access control. The user-defined pattern information 251 is previously registered and stored as a pattern image that can be recognized from the photographed image of the opening / closing apparatus 100 that the user can access. The user-defined pattern information 251 may be received from the security service apparatus 300, or may be extracted from the photographed image of the opening / closing apparatus 100 which the user wants to take in through the pre-registration process.

The control unit 260 is a component for controlling and executing the overall operation of the terminal 200. The control unit 260 includes a processor and loads the computer program stored in the storage unit 250 through the processor, And controls the input unit 210, the output unit 220, the communication unit 230, the camera unit 240, and the storage unit 250 according to the interpreted instruction of the computer program. In the control unit 260, when the functions performed by the execution of the computer program instructions are represented by modules, the control unit 260 controls the image capturing module 261, A processing module 262, a server interworking module 263, and a user interface module 264.

The image capturing module 261 captures the captured image output from the camera unit 240 and transmits the captured image to the image processing module 262. At this time, The captured image can be captured. In the present invention, the captured image captured is the image of the opening / closing apparatus 100.

The image processing module 263 is a means for recognizing a pattern image to be used for authentication for access control from a captured image captured by the image capturing module 261. For example, An AR (Augmented Reality) module that recognizes an object or a mark, and superimposes digital contents on the captured image according to a recognition result and outputs the digital content. When the AR module is used, the process of recognizing the pattern image from the captured image and the combination of the contents (for example, the user interface screen for controlling the door) designated in correspondence with the previously registered pattern image with the captured image, .

As described above, the pattern image is extracted from the photographed image. For example, the pattern image may be a pattern appearing on the surface of the opening and closing device 100, a shape of the opening and closing device 100, a marker attached thereto or drawn have.

The image processing module 263 compares the pattern image recognized from the photographed image with the pattern image of the user-defined pattern information stored in the storage unit 250 to determine whether the pattern image is matched. The access control system according to the present invention performs first authentication based on the pattern image recognized from the photographed image in the terminal 200 to determine whether the opening and closing device 100 is the opening / First, we can judge. If the pattern image recognized from the photographed image of the opening and closing apparatus 100 is not matched with the pattern image of the user-defined pattern information 251 previously stored, the opening / closing device 100 is regarded as not being an access control target .

On the contrary, if the pattern image recognized from the photographed image of the opening / closing apparatus 100 is matched with the pattern image of the user-defined pattern information 251 as a result of the above determination, it is regarded that the primary authentication is successful and the server interlock module 263 Specifically, user identification information, a captured image captured from the camera unit 240, and a pattern image determined to be matched in the image processing module 262 To the security service apparatus 300.

The server interworking module 263 controls the communication unit 230 to perform the interworking with the server device for access control, that is, the security service device 300, and controls the image processing module 262 and the user interface The module 264 transmits a message transmitted from the security service apparatus 300 or conversely transmits a message requested from the image processing module 262 and the user interface module 264 to the security service apparatus 300.

 The user interface module 264 controls the input unit 210 and the output unit 220 to output an authentication result and guide the user to the user. Information, for example, a user interface for inputting a password.

A process for access control of the terminal 200 configured as described above will be described in detail with reference to FIGS. 4 and 5. FIG.

Next, FIG. 3 is a block diagram illustrating the configuration of the security service apparatus 300 in the access control system according to the present invention.

The security service apparatus 300 includes a storage unit 310, an image processing unit 320, an authentication processing unit 330, and an opening / closing unit 330. The storage unit 310, the image processing unit 320, And may include a control unit 340.

The storage unit 330 may be implemented by various storage means including a NAS (Network Access Storage) for storing data required for access control in the security service apparatus 300. [ In particular, in the present invention, the storage unit 330 stores an account management DB. The account management DB is a database for managing account information of a user who uses access control. Here, the account management DB may store user identification information, password information for tertiary authentication, and pattern image information for secondary authentication. 6 is a table illustrating account information managed in the account management DB. The table includes user identification information 61, an International Mobile Station Identity (IMSI) assigned to the terminal 200, a Temporary Mobile Subscriber Identity (TMSI) (Mobile Identification Number), an MSISDN (Mobile Station International ISDN Number), an IMEI (International Mobile Equipment Identity), a PIN (Personal Identification Number), or an ID generated by a user. The password information 62 and the pattern image information 63 are managed by being matched with each other. The pattern information 63 is a pattern image that can be recognized from the open / close device 100 which is allowed to enter and leave the user, and it is possible to identify the password image 62 And a recognition image path information in which the pattern image data is stored. In particular, the password information 62 may be encrypted and stored for secure management.

For example, the image processing unit 320 recognizes a specific pattern or object or mark included in the captured image, and stores the digital content in the captured image in accordance with the recognition result It can be implemented as an Augmented Reality (AR) engine that overlaps and outputs

The authentication processing unit 330 is an apparatus for authenticating the opening and closing apparatus 100 and the user who are authorized to enter and exit by the user of the terminal 200 in cooperation with the terminal 200. Specifically, Pattern recognition based second authentication and password based third authentication.

The opening and closing device control part 340 is configured to control the driving of the opening and closing device 100 by communicating with the opening and closing device 100. The opening and closing device 100 can be opened and closed according to the authentication result of the authentication processing part 330. [ .

The process of access control based on pattern recognition according to the interlocking of the terminal 200 and the security service device 300 configured as described above will be described with reference to FIG.

4 is a flowchart illustrating a pattern recognition based access control process by the access control system according to the present invention.

4, the terminal 200 photographs the opening / closing apparatus 100 through the camera unit 240 according to an operation of a user who intends to enter / exit the specific opening / closing apparatus 100 (S105).

Then, the captured image of the opening / closing device 100 is captured through the image capturing module 261 and the image processing module 262, and the pattern image is recognized from the captured image (S110).

The terminal 200 performs first authentication for determining whether the device is a legitimate opening / closing device based on the recognized pattern image. This is because the pattern image recognized from the captured image by the image processing module 262 Is compared with a pattern image of a previously registered user-defined pattern (S115).

As a result of the comparison, if the recognized pattern image does not match the pattern image of the user-defined pattern, the opening / closing device 100 regards the authentication as failed because the opening / closing device 100 is not an opening / If the pattern image matches the pattern image of the user-defined pattern, it is regarded that the primary authentication is successful, and the user identification information, the pattern image recognized by the terminal 200, and the captured image of the opening / To the device 300 (S120). The information may be transmitted in a data format as shown in FIG. 7 (a). Here, the type is information for defining the type of the user identification information, for example, whether the user identification information is MSIDSN or ID.

The security service apparatus 300 receives the user identification information, the pattern image, and the photographed image. The security service apparatus 300 performs secondary authentication based on the received user identification information, the pattern image, and the shot image. Specifically, the security service apparatus 300 compares account information previously registered with the user identification information, The pattern image information is confirmed by inquiring the storage unit 310 through the received pattern image and the pattern image is recognized from the captured image through the image processing unit 320 Thereafter, it is determined whether the recognized pattern image is matched (S125). Here, if the user identification information is not pre-registered or the pattern image is not matched with the pre-registered information, it is determined that the secondary authentication has failed, and in the opposite case, it is determined that the secondary authentication is successful.

The security service apparatus 300 transmits the secondary authentication result to the terminal 200.

Accordingly, the terminal 200 can guide the user to the secondary authentication result output from the security service device 300 through the user interface module 264. [

At this time, if the secondary authentication result is successful, the terminal 200 outputs a user interface screen for inputting a password for the tertiary authentication, and transmits the input password to the security service apparatus 300 (S135 S140). At this time, the terminal 200 can transmit the password in the data format as shown in FIG. 7 (b). In (b) of FIG. 7, the type defines the kind of user identification information. In addition, the user interface screen may be superimposed on the photographed image photographed by the camera unit 240 and expressed as an augmented reality. In addition, for secure transmission, the password can be encrypted and transmitted. In order to encrypt the password, a symmetric encryption method such as DES (data encryption standard), AES, SEED, MASK, asymmetric encryption method such as RSA (Rivest Shamir Adleman) and DSS (Digital Signature Standard) Various encryption algorithms can be applied.

If the secondary authentication is successful, the security service apparatus 300 receives the password for the tertiary authentication from the terminal 200, determines whether the received password matches the password registered in the account information, (S145). As described above, the security service apparatus 300 encrypts and stores the password information in order to minimize the risk of exposing personal information when the password information 62 is previously registered and managed, as shown in FIG. 6 . In this case, in step S145, the encrypted password and the pre-registered password information 62 are calculated through the predetermined similarity determination function from the terminal 200, thereby performing the third authentication without a decryption process. Various known encryption techniques can be referred to for this purpose.

Here, if the password matches the password registered in the account information, it is determined that the third-party authentication is successful, and if the password is the opposite, it is determined that the third-party authentication failed.

The security service apparatus 300 transmits the tertiary authentication result to the terminal 200 so that the terminal 200 can guide the user of the tertiary authentication result (S150).

The security service apparatus 300 transmits a control command for controlling opening and closing to the opening / closing apparatus 100, that is, the opening / closing apparatus 100 corresponding to the pattern image, S155), and controls the opening and closing apparatus 100 to be driven (S160).

5, a process for access control performed by the terminal 200 will be described in more detail.

The pattern recognition-based access control process of the terminal 200 will be described in more detail with reference to FIG.

In order to perform access control based on the pattern recognition according to the present invention, the terminal 200 must first register a user defined pattern (S205). The user defined pattern means a pattern image matched to the opening / closing apparatus 100 to which the access control object is applied. The user defined pattern is a pattern image obtained by photographing the opening / closing apparatus 100 in advance, Images can be registered as custom patterns.

Thereafter, when the user instructs the photographing of the opening / closing apparatus 100 for entrance and exit, the terminal 200 photographs the opening / closing apparatus 100 through the camera unit 240, and the image capturing module 261 photographs the opening / Captures and acquires an image photographed by the image capturing apparatus 240 (S210).

Then, the image processing module 262 of the terminal 200 recognizes a pattern image to be used for authentication for access control from the captured image (S215), and recognizes the pattern image as a pattern of previously registered user defined pattern information The first authentication is performed in comparison with the image (S220). If the recognized pattern image is matched with the pattern image of the user-defined pattern, it is determined that the primary authentication is successful. If the pattern image is not matched, it is determined that the primary authentication has failed (S225).

If the primary authentication is successful, the terminal 200 transmits the user identification information, the captured image captured, and the recognized pattern image to the security service device 300 to request authentication (S230). Accordingly, the security service apparatus 300 performs the secondary authentication by comparing the received user identification information, the captured image, the recognized pattern image, and the account information.

The terminal 200 receives the secondary authentication result from the security service apparatus 300 in step 235. If the received secondary authentication result is successful in step S240, the terminal 200 outputs a user interface screen for inputting a password, 210) to receive a password from the user (S245).

Then, the terminal 200 transmits the input password to the security service apparatus 300 (S250). At this time, the terminal 200 can encrypt and transmit the password according to a predetermined encryption setting with the security service apparatus 300.

Thereafter, the terminal 200 waits for the result of the third authentication, receives the third authentication result from the security service device 300 (S255), and if the received third authentication result is successful, The message to the output unit 220 indicating that the opening / closing apparatus 100 is operated due to the successful authentication can be output (S265).

On the other hand, if any of the primary authentication, the secondary authentication, and the tertiary authentication fails, the terminal 200 outputs a message informing that the opening / closing apparatus 100 is not activated due to the failure of authentication (S270 ).

The processes shown in FIGS. 4 and 5 may be realized in the form of software readable by various computer means and recorded in a computer-readable recording medium. Here, the recording medium may include program commands, data files, data structures, and the like, alone or in combination. Program instructions to be recorded on a recording medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. For example, the recording medium may be an optical recording medium such as a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, a compact disk read only memory (CD-ROM), a digital video disk (DVD) Includes a hardware device that is specially configured to store and execute program instructions such as a magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), a flash memory, do. Examples of program instructions may include machine language code such as those generated by a compiler, as well as high-level language code that may be executed by a computer using an interpreter or the like. Such a hardware device may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be apparent to those skilled in the art. Furthermore, although specific terms are used in this specification and the drawings, they are used in a generic sense only to facilitate the description of the invention and to facilitate understanding of the invention, and are not intended to limit the scope of the invention.

Also, the security service apparatus 300 or the terminal 200 according to the present invention can be driven by an instruction to cause one or more processors to perform the functions and processes described above. Such instructions may include, for example, interpreted instructions such as script commands, such as JavaScript or ECMAScript commands, or other instructions stored in executable code or computer readable media. Here, the processor may be a single-threaded processor, and in other embodiments, the processor may be a multithreaded processor and is capable of processing instructions stored on memory or on a storage device.

Although the present specification and drawings describe exemplary device configurations, the functional operations and subject matter implementations described herein may be embodied in other types of digital electronic circuitry, or alternatively, of the structures disclosed herein and their structural equivalents May be embodied in computer software, firmware, or hardware, including, or in combination with, one or more of the foregoing. Implementations of the subject matter described herein may be embodied in one or more computer program products, i. E. One for computer program instructions encoded on a program storage medium of the type for < RTI ID = 0.0 & And can be implemented as a module as described above. The computer-readable medium can be a machine-readable storage device, a machine-readable storage substrate, a memory device, a composition of matter that affects the machine readable propagation type signal, or a combination of one or more of the foregoing.

The terms "processing system", "processing apparatus" and "subsystem" encompass all apparatuses, apparatus, and machines for processing data, including, for example, a programmable processor, a computer or a multiprocessor or computer. The processing system may, in addition to the hardware, comprise code that forms an execution environment for a computer program upon request, such as, for example, code comprising a processor firmware, a protocol stack, a database management system, an operating system, .

A computer program (also known as a program, software, software application, script, or code) that is loaded on an apparatus according to the present invention and which implements the method according to the present invention may be a compiled or interpreted language, a program containing a priori or procedural language Language, and may be deployed in any form including standalone programs or modules, components, subroutines, or other units suitable for use in a computer environment. A computer program does not necessarily correspond to a file in the file system. The program may be stored in a single file provided to the requested program, or in multiple interactive files (e.g., a file storing one or more modules, subprograms, or portions of code) (E.g., one or more scripts stored in a markup language document). A computer program may be deployed to run on multiple computers or on one computer, located on a single site or distributed across multiple sites and interconnected by a communications network.

Implementations of the subject matter described herein may include, for example, a back-end component such as a data server, or may include a middleware component, such as an application server, or may be a web browser or a graphical user, for example a user, who may interact with an implementation of the subject- Front-end components such as client computers with interfaces, or any combination of one or more of such back-end, middleware, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication, such as, for example, a communications network.

While the specification contains a number of specific implementation details, it should be understood that they are not to be construed as limitations on the scope of any invention or claim, but rather on the description of features that may be specific to a particular embodiment of a particular invention Should be understood. Certain features described herein in the context of separate embodiments may be implemented in combination in a single embodiment. Conversely, various features described in the context of a single embodiment may also be implemented in multiple embodiments, either individually or in any suitable subcombination. Further, although the features may operate in a particular combination and may be initially described as so claimed, one or more features from the claimed combination may in some cases be excluded from the combination, Or a variant of a subcombination.

Likewise, although the operations are depicted in the drawings in a particular order, it should be understood that such operations must be performed in that particular order or sequential order shown to achieve the desired result, or that all illustrated operations should be performed. In certain cases, multitasking and parallel processing may be advantageous. Also, the separation of the various system components of the above-described embodiments should not be understood as requiring such separation in all embodiments, and the described program components and systems will generally be integrated together into a single software product or packaged into multiple software products It should be understood.

Certain embodiments of the subject matter described herein have been described. Other embodiments are within the scope of the following claims. For example, the operations recited in the claims may be performed in a different order and still achieve desirable results. By way of example, the process illustrated in the accompanying drawings does not necessarily require that particular illustrated or sequential order to obtain the desired results. In certain implementations, multitasking and parallel processing may be advantageous.

The description sets forth the best mode of the invention, and is provided to illustrate the invention and to enable those skilled in the art to make and use the invention. The written description is not intended to limit the invention to the specific terminology presented. Thus, while the present invention has been described in detail with reference to the above examples, those skilled in the art will be able to make adaptations, modifications, and variations on these examples without departing from the scope of the present invention.

Therefore, the scope of the present invention should not be limited by the described embodiments but should be defined by the claims.

The pattern recognition-based access control technology according to the present invention recognizes the pattern image from the photographed image of the opening / closing apparatus through image processing such as an augmented reality and performs multi-stage authentication based on the pattern image to improve security .

Specifically, the present invention compares a pattern image recognized from a photographed image at a terminal with a pattern image of a previously registered user-defined pattern to first authenticate whether the device is legitimate, that is, an accessable device, and if the first authentication is successful And transmits the recognized pattern image and the photographed image to the security service apparatus together with the user identification information to perform a secondary authentication for confirming the user confirmation and the pattern image through the security service apparatus, It is possible to authenticate a legitimate user and the opening / closing device to / from the user by comparing the password input from the user with the pre-registered password, thereby improving the reliability of access control .

Further, the present invention not only improves the user convenience by combining the augmented reality with access control, but also can reduce the installation cost of the device for user recognition by the opening / closing device by using the terminal carried by the user.

100: switchgear 200: terminal
261: Image Capture Module 262: Image Processing Module
263: server interworking module 264: user interface module
300: security service device 310: storage unit
320: Image processor 330: Authentication processor
340: opening / closing device control section

Claims (9)

An image capturing module for capturing an image of the opening / closing device photographed by the camera;
An image processing module for recognizing a pattern image from the photographed image and comparing the recognized pattern image with a pattern image of a previously stored user defined pattern to perform first authentication;
And transmits the user identification information together with the photographed image and the recognized pattern image to a security service apparatus that controls the opening / closing apparatus when the first authentication is successful, A server interworking module for receiving the secondary authentication result based on the identification information and requesting the tertiary authentication to transmit the password input to the security service device when the secondary authentication is successful; And
And a user interface module for outputting a user interface screen for inputting the password and receiving the password. The method of claim 1, wherein the user interface module
And outputs whether the opening / closing device is open or closed according to the authentication result and the authentication result. A storage unit for storing account information for access control based on pattern recognition including user identification information registered for each user, a password, and a pattern image of the opening / closing apparatus; And
Receiving an image photographed by the terminal from the terminal, a first authenticated pattern image and user identification information at the terminal, comparing the user identification information and the first authenticated pattern image with the account information, And an authentication processor for performing a third-level authentication by receiving a password from the terminal and comparing the password with the account information. The method of claim 3,
Further comprising an image processing unit for recognizing a pattern image from the received photographed image,
The authentication processing unit searches the account information using the received user identification information and the pattern image to check whether the information is pre-registered information, and if the registered image information is the registered image, Wherein the second authentication is performed by comparing the received pattern image with the received pattern image. The method of claim 3,
And an opening / closing device controller for controlling the opening / closing of the opening / closing device according to the result of the third authentication. Capturing a captured image of the opening / closing device;
Recognizing a pattern image from the captured image;
Performing a primary authentication by comparing a pattern image of a previously stored user-defined pattern with a matching pattern image; And
Transmitting the user identification information, the captured image, and the recognized pattern image to the security service device to request the secondary authentication if the primary authentication is successful;
Receiving a password when the second authentication is successful in the security service device;
And transmitting the input password to the security service apparatus to request the third-level authentication. Storing account information for access control based on pattern recognition including user identification information registered on a user-by-user basis, a password, and a pattern image of the switchgear;
Receiving an image of an opening / closing device photographed by the terminal, a first authenticated pattern image and user identification information at the terminal;
Performing second authentication by comparing the received user identification information and a first authenticated pattern image with the account information;
Receiving a password from the terminal;
And performing third authentication by comparing the password and the account information. 8. The method of claim 7, wherein performing the secondary authentication comprises:
And the pattern image is recognized from the received photographed image in the case of pre-registered information, and if the recognized pattern image is the registered pattern image, And compares the received pattern image with a received pattern image. 8. The method of claim 7,
And controlling the opening and closing of the switching device according to the result of the third authentication.

Images