KR20180015914A - Remote control terminal for IoT device, and system and method for providing IoT device remote control service using thereof - Google Patents

Abstract

Disclosed is a technology relating to an IoT device remote control terminal and a system and method for providing an IoT device remote control service using the same. According to an embodiment of the present invention, the system for providing an IoT device remote control service comprises: an authentication information reception unit for receiving first authentication information including terminal identification information of a remote control terminal and second authentication information including biometric information of a user from the remote control terminal that remotely controls an IoT device; a terminal registration authentication unit for performing a terminal registration authentication process for the remote control terminal by using the terminal identification information; a service subscription authentication unit for performing a service subscription authentication process for the user by using the biometric information; and a device control unit for checking device identification information of an IoT device to be controlled, corresponding to the biometric information, if the terminal registration authentication and the service subscription authentication are successful, and transmitting third authentication information including the device identification information to the IoT device to be controlled so as to allow the IoT device to be controlled to perform a control authority authentication process for the user. Therefore, according to the present invention, it is possible to improve security, reliability and user convenience of IoT device control, and to reduce manufacturing cost of IoT devices while preventing damage to personal information leakage caused by hacking of IoT devices and the like.

Description

TECHNICAL FIELD [0001] The present invention relates to a remote control terminal for an IoT device, and a system and a method for providing an IoT device remote control service using the remote control terminal.

The present invention relates to an IoT device remote control terminal and a system and method for providing an IoT device remote control service using the IoT device remote control terminal. More particularly, the present invention relates to an IoT device remote control service which improves security, reliability, The present invention relates to an IoT device remote control terminal that reduces the manufacturing cost of an IoT device while preventing damage, and a system and method for providing an IoT device remote control service using the same.

In general, Internet of Things (IOT) is an intelligent information communication technology or service that enables communication between people, objects, objects and objects by providing network connection to various objects based on the Internet. Recently, with the rapid growth of IoT technology, there is a growing interest in and demand for a technique for improving user convenience in controlling IoT devices while securing security of IoT devices.

However, existing IoT devices such as IPTV, digital door lock, vehicle ECU, parking lot switch, webcam, home temperature controller and sprinkler controller that can be remotely controlled using a remote control terminal such as remote controller or smart phone, 70% of the users collect personal information while they are not encrypting personal information. About 60% of the existing IoT devices use an interface that does not support security, There is a problem that security against external attack such as dictionary attack is weak.

In the meantime, as disclosed in Korean Patent Publication No. 10-0541386 and Korean Patent Registration No. 10-1421681, existing technologies that use biometric information of a user for security at the time of electronic device control, Since the authentication procedure using the biometric information of the user is performed to confirm the control authority, the authentication biometric information must basically be stored in advance for each control target device. As a result, the personal information such as the biometric information of the user is stored in the external There is a problem that can be leaked by attack. In addition, when these existing technologies are applied to the IoT device control, the biometric sensor or the biometric information management module must be separately provided for each IoT device, which increases the manufacturing cost of the IoT device.

In addition, existing technologies do not provide a technology for allowing a corresponding IoT device to perform a differentiated operation for each user when a plurality of users control the same IoT device using one remote control terminal. For example, existing technologies do not provide a way to differentiate between the case where an adult operates an IPTV and the case where a minor is operating an IPTV, and differently provide viewable broadcast channels.

SUMMARY OF THE INVENTION It is an object of the present invention to provide an IoT device remote control terminal which improves the security, reliability and user convenience of IoT device control and reduces the manufacturing cost of the IoT device while preventing damage to personal information leakage due to hacking of the IoT device, And a system and method for providing IoT device remote control service using the same.

The IoT device remote control service providing system according to an embodiment of the present invention includes first authentication information including terminal identification information of the remote control terminal and biometric information of the user from a remote control terminal that remotely controls the IoT device An authentication information receiving unit for receiving second authentication information to be transmitted; A terminal registration authentication unit for performing a terminal registration authentication procedure for the remote control terminal using the terminal identification information; A service subscription authenticating unit for performing a service subscription authenticating procedure for the user using the biometric information; And if the terminal registration authentication and service subscription authentication are successful, confirms the device identification information of the control target IoT device corresponding to the biometric information, and transmits the third authentication information including the device identification information to the control target IoT device And controlling the IoT device to perform the control authority authentication procedure for the user.

In one embodiment, the system includes a registration unit that includes terminal identification information for identifying a remote control terminal of the service subscriber, biometric information of the service subscriber, and device identification information of the IoT device corresponding to the biometric information of the service subscriber And a service subscriber registration unit for registering the service subscriber by storing information.

In one embodiment, the service subscriber registration unit may further store an operation control command corresponding to the biometric information of the service subscriber as an operation control command for controlling the operation of the IoT device.

In one embodiment, the first authentication information is information obtained by encrypting the terminal identification information, and the second authentication information may be information obtained by combining the biometric information with the terminal identification information.

In one embodiment, the service subscription authenticating unit may decrypt the second authentication information using the first authentication information, and obtain the biometric information from the decrypted second authentication information.

In one embodiment, the device control unit may include an operation control command for controlling the operation of the IoT device when the terminal registration authentication and the service subscription authentication are successful, as an operation control command corresponding to the biometric information, As shown in FIG.

In one embodiment, the remote control terminal compares the biometric information of the user obtained through the biometric sensor with the biometric information stored in advance, as a user authentication procedure, and if there is an identity between the first authentication information and the second authentication information, Authentication information to the system.

In one embodiment, the control target IoT device compares the device identification information included in the third authentication information with the device identification information stored in advance as the control authority authentication procedure, and performs a preset operation if there is a match .

In one embodiment, the control target IoT device may compare the device identification information included in the third authentication information with the device identification information stored in advance as the control authority authentication procedure, and if the same is identical to the device identification information, Operation can be performed.

A method for providing an IoT device remote control service according to an embodiment of the present invention includes:

A remote control terminal for remotely controlling the IoT device and a predetermined system for communicating with the IoT device, wherein the system comprises: first authentication information including terminal identification information of the remote control terminal from the remote control terminal; An authentication information receiving step of receiving second authentication information including information; A terminal registration authentication step in which the system performs a terminal registration authentication procedure for the remote control terminal using the terminal identification information; A service subscription authentication step in which the system performs a service subscription authentication procedure for the user using the biometric information; And if the terminal registration authentication and service subscription authentication are successful, the system confirms the device identification information of the control target IoT device corresponding to the biometric information, and transmits the third authentication information including the device identification information to the control To the target IoT device and causing the control target IoT device to perform the control right authentication procedure for the user.

In one embodiment, the method further comprises: identifying the terminal identification information identifying the remote control terminal of the service subscriber, the biometric information of the service subscriber, and the device identification information of the IoT device corresponding to the biometric information of the service subscriber And registering the service subscriber by storing the registration information including the service subscriber registration step.

In one embodiment, the service subscriber registration step may further include storing an operation control command corresponding to biometric information of the service subscriber as an operation control command for controlling the operation of the IoT device.

In one embodiment, the first authentication information is information obtained by encrypting the terminal identification information, and the second authentication information may be information obtained by combining the terminal identification information and the biometric information.

In one embodiment, the service subscription authentication step may include decrypting the second authentication information using the first authentication information, and obtaining the biometric information from the decrypted second authentication information.

In one embodiment, the device control step may include an operation control command for controlling the operation of the IoT device when the terminal registration authentication and the service subscription authentication are successful, the operation control command corresponding to the biometric information, And further transmitting to the device.

In one embodiment, the method further comprises comparing the biometric information of the user acquired through the biometric sensor as a user authentication procedure with the remote control terminal, comparing the biometric information of the user with previously stored biometric information, And transmitting the second authentication information to the system.

In one embodiment, the control target IoT device compares the device identification information included in the third authentication information with the device identification information previously stored as the control right authentication procedure, The method comprising the steps of:

In one embodiment of the present invention, the control target IoT device compares the device identification information included in the third authentication information with the device identification information previously stored as the control right authentication procedure, And performing an operation according to the command.

The IoT device remote control terminal according to an embodiment of the present invention includes a biometrics unit for recognizing a user's biometrics through a biometrics sensor and acquiring biometrics information of the user; A user authentication unit for authenticating the user as a party user when the biometric information is compared with biometric information stored in advance and there is a mutual identity; A first authentication information generating unit for generating encrypted first authentication information including terminal identification information of the terminal; A second authentication information generating unit for generating second authentication information including the biometric information encrypted; And an authentication information transmitting unit for transmitting the first authentication information and the second authentication information to a predetermined system providing the IoT device remote control service when the user is authenticated as a party user.

In one embodiment, the second authentication information may be information that is encrypted or decrypted using the first authentication information.

In one embodiment, the terminal transmits biometric information of the user obtained through the biometric unit and terminal identification information of the terminal to the system, and requests the user to register the user as a subscriber of the IoT device remote control service And may further include a registration request section.

Embodiments in accordance with the present invention may be implemented in a computer program that executes the above-described operations or methods in a computer system.

According to the present invention, the remote control terminal can remotely control the IoT devices using the biometric information of the service subscribers, thereby improving the security and convenience of the IoT device control.

In particular, a remote control terminal, an IoT device remote control service provision system, and an IoT device interworking for the IoT device remote control service are configured to perform user authentication, remote control terminal and service subscriber authentication, and control authorization authentication, respectively By applying the step authentication scheme, the security and reliability of the IoT device remote control service can be further improved.

In addition, by performing information encryption and multi-channel authentication procedures in a cascade using terminal identification information of the remote control terminal and device identification information of the IoT device together with the user's biometric information, the security and reliability of the IoT device remote control service Can be further improved.

In addition, the IoT device remote control service providing system manages the biometric information of the service subscribers in a centralized manner and functions as an authentication information mediation system for simplifying the authentication information to be used by each IoT device. The control authority of the user of the remote control terminal can be confirmed by using only simple information such as the unique number of the IoT device without having to separately provide the biometric sensor or the biometric information management module and as a result, While reducing the load on IoT devices and reducing manufacturing costs.

In addition, by allowing the user to designate the operation of the control target IoT device and the corresponding IoT device according to the user's biometric information, it is possible to control a plurality of IoT devices with one remote control terminal, It is possible to perform a differentiated operation for each user.

It will be apparent to those skilled in the art that various embodiments of the present invention can be made without departing from the spirit and scope of the present invention.

1 is a diagram showing an example of an IoT environment to which the present invention is applied.
2 is a block diagram illustrating an IoT device remote control terminal according to an embodiment of the present invention.
3 is a block diagram illustrating a system for providing an IoT device remote control service according to an embodiment of the present invention.
4 is a block diagram illustrating an IoT device according to an embodiment of the present invention.
5 is a flowchart illustrating a service subscriber registration process of a method of providing an IoT device remote control service according to an embodiment of the present invention.
6 is a flowchart illustrating a remote control process of an IoT device in a method of providing an IoT device remote control service according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings in order to clarify solutions for technical problems of the present invention. In the following description of the present invention, however, the description of related arts will be omitted if the gist of the present invention becomes obscure. In addition, the terms described below are defined in consideration of the functions of the present invention, and may be changed depending on the intention or custom of the designer, the manufacturer, and the like. Therefore, the definition should be based on the contents throughout this specification.

1 shows an example of the IoT environment to which the present invention is applied.

1, various IoT devices 300 used in various places such as a home, a company, a business office, and the like are connected to a wired / wireless communication network 300 through an AP (Access Point) And can perform data communication. Such IoT devices include various devices that provide specific operations or services using IoT technology such as IPTV (Internet Protocol Television), digital door lock (Digital Door Lock), vehicle ECU (Electronic Control Unit) system, parking lot switch, webcam ), A lap top, a home temperature regulator, a sprinkler regulator, and the like.

The IoT device remote control terminal 100 and the IoT device remote control service providing system 200 according to the present invention can be applied to the IoT environment so that the service subscribers can utilize their own biometric information as a kind of trigger, So that the device 300 can be operated or the operation of the corresponding IoT device 300 can be controlled.

FIG. 2 is a block diagram of an IoT device remote control terminal 100 according to an embodiment of the present invention.

2, the IoT device remote control terminal 100 is a terminal that remotely controls IoT devices, and includes a biometrics unit 110, a user authentication unit 120, a first authentication information generation unit 130, A second authentication information generating unit 140, and an authentication information transmitting unit 150, and may further include a registration request unit 160 and the like according to an embodiment.

The biometric unit 110 can recognize biometric information of the user through the biometric sensor that recognizes the user's biometric information such as a fingerprint, an iris, a face, and a palm. In this case, the biometric unit 110 acquires the biometric information of the user using the remote control terminal 100 in the user registration process before the IoT device remote control process, stores the biometric information in the predetermined storage unit 102 in advance, The biometrics information of the user who wants to control the IoT device can be acquired again in the device control process.

The user authentication unit 120 compares the biometric information obtained in the IoT device control process with the biometric information stored in the storage unit 102 as a user authentication procedure as a first step authentication procedure, The user can be authenticated as a party user.

The first authentication information generating unit 130 may generate the first authentication information including the terminal identification information for identifying the remote control terminal 100. In this case, the terminal identification information may be a unique number of the remote control terminal 100 or the like.

The second authentication information generating unit 140 may generate the second authentication information including the biometric information. In this case, the second authentication information may be information obtained by combining the biometric information and the terminal identification information. Also, the second authentication information may be information that is encrypted or decrypted using the first authentication information. That is, the terminal identification information may be used as information for generating the first authentication information, and may be an encryption key for encrypting the second authentication information or information for generating a decryption key for decrypting the second authentication information Can be used.

The authentication information transmitting unit 150 transmits the first authentication information and the second authentication information to the wireless communication unit 100 of the remote control terminal 100 when the user is authenticated as a party user by the user authentication unit 120. [ To the predetermined system 200 providing the IoT device remote control service through the IoT device remote control service 104. In this case, the wireless communication unit 104 of the remote control terminal 100 can transmit authentication information using a short-range wireless communication method such as Bluetooth or Wi-Fi, and can also transmit authentication information such as LTE-MTC (LTE-Machine Type Communication) (Low Power Wide Area) communication method. When the wireless communication unit 104 of the remote control terminal 100 transmits the authentication information using the LPWA communication method, it is possible to use the license-unlicensed frequency band or the existing LTE mobile communication frequency band, Of course, it is possible to overcome the communication distance limitation of the short-range wireless communication method while reducing the power consumption of the terminal.

Meanwhile, in the service subscriber registration process before the IoT device remote control process, the registration request unit 160 of the IoT device remote control terminal 100 registers the biometric information of the user obtained through the biometrics unit 110, The terminal identification information of the control terminal 100 may be transmitted to the system 200 to request that the user be registered as a subscriber of the IoT device remote control service.

The IoT device remote control terminal 100 may be implemented in a form of a small terminal capable of wireless communication such as a remote controller or a smart key and may be implemented as a smart phone or PDA Digital Assistant), or the like, for example, by installing a dedicated application in an existing mobile terminal.

As described above, the IoT device remote control terminal 100 compares the biometric information of the user obtained through the biometric sensor such as the fingerprint recognition sensor with the biometric information stored in advance in the user authentication procedure, which is the first step authentication procedure, The first authentication information and the second authentication information may be transmitted to the system 200 if they are identical.

FIG. 3 is a block diagram of a system 200 for providing an IoT device remote control service according to an embodiment of the present invention.

3, the IoT device remote control service providing system 200 includes an authentication information receiving unit 210, a terminal registration authentication unit 220, a service registration authentication unit 230, and a device control unit 240 A service subscriber registration unit 250, and the like.

In the IoT device remote control process, the authentication information receiving unit 210 receives, from the remote control terminal 100 via the communication unit 202 of the system 200, the authentication information including the terminal identification information of the remote control terminal 100 1 authentication information, and second authentication information including biometric information of the user. In this case, the communication unit 202 of the system 200 can perform data communication with external devices using an LPWA communication method such as LTE-MTC or the like. Also, as described above, the first authentication information received by the authentication information receiving unit 210 is information obtained by encrypting the terminal identification information of the remote control terminal 100, and the second authentication information includes the user's biometric information And may be information encrypted by combining with the terminal identification information.

The terminal registration authenticating unit 220 obtains the terminal identification information of the remote control terminal 100 from the authentication information received by the authentication information receiving unit 210, The terminal registration authentication procedure for the control terminal 100 can be performed. In this case, the terminal registration authenticating unit 220 performs the terminal registration authentication procedure by comparing the terminal identification information acquired from the authentication information with the terminal identification information stored in advance in the predetermined database 204 of the system 200 . At this time, if the terminal identification information acquired from the authentication information and the terminal identification information stored in the database 204 are identical to each other, the terminal registration authenticating unit 220 can determine that the terminal registration authentication is successful.

The service subscription authenticating unit 230 obtains the biometric information of the user of the remote control terminal 100 from the authentication information received by the authentication information receiving unit 210 and transmits the biometric information to the user using the obtained biometric information. Service subscription authentication procedure can be performed. In this case, the service subscription authenticating unit 230 may decrypt the second authentication information using the first authentication information, and obtain the biometric information from the decrypted second authentication information. That is, the first authentication information can be used as a decryption key for decrypting the second authentication information. Also, the service subscription authenticating unit 230 can perform the service subscription authentication procedure by comparing the biometric information of the user acquired from the authentication information with the biometric information stored in the database 204 of the system 200 have. At this time, if the biometric information acquired from the authentication information and the biometric information stored in the database 204 are identical to each other, the service subscription authenticating unit 230 can determine that the service subscription authentication is successful.

If the terminal registration authentication and service subscription authentication are successful, the device control unit 240 searches the database 204 to confirm the device identification information of the control target IoT device 300 corresponding to the biometric information, The control target IoT device 300 transmits the third authentication information including the device identification information to the control target IoT device 300 through the communication part 202 of the system 200, The control authority authentication process can be performed. In this case, the device identification information may be a unique number of the control target IoT device 300 or the like. In addition, the third authentication information may be encrypted information including the device identification information of the control target IoT device 300. [ According to the embodiment, when the terminal registration authentication and the service subscription authentication are successful, the device control unit 240 searches for the database 204 and controls the operation of the IoT device as an operation control command corresponding to the biometric information It is possible to confirm the operation control command and further transmit the operation control command to the control target IoT device 300. [

Meanwhile, in the service subscriber registration process before the IoT device remote control process, the service subscriber registration unit 250 of the IoT device remote control service providing system 200 registers the terminal identification (ID) identifying the remote control terminal 100 of the service subscriber The biometric information of the service subscriber, and the device identification information of the IoT device corresponding to the biometric information of the service subscriber, thereby registering the service subscriber. According to an embodiment, the service subscriber registration unit 250 may further store an operation control command corresponding to the biometric information of the service subscriber as an operation control command for controlling the operation of the IoT device. In this case, the service subscriber registration unit 250 may receive the corresponding registration information from the remote control terminal 100 and store the received registration information in the database 204 of the system 200. According to the embodiment, the service subscriber registration unit 250 receives and stores only the terminal identification information and the service subscriber biometric information from the remote control terminal 100, and stores the device identification information of the IoT device corresponding to the corresponding biometric information, A control command or the like may be received and stored from a user PC connected to the service subscription site.

The terminal registration authentication unit 220, the service registration authentication unit 230, the device control unit 240, and the service subscriber registration unit 250 of the IoT device remote control service providing system 200 are respectively provided as independent servers, Or two or more may be implemented as one integrated server.

As described above, the IoT device remote control service providing system 200, when each of the authentication in the terminal authentication procedure and the service subscription authentication procedure as the second step authentication procedure succeeds, the third authentication including the device identification information of the control target IoT device Information can be transmitted to the corresponding IoT device 300.

FIG. 4 is a block diagram of an IoT device 300 according to an embodiment of the present invention.

4, the IoT device 300 includes a control authority authenticating unit 310 and an operation control unit 320 and includes a wireless communication unit 302, a storage unit 304, a driving unit 306, .

When the third authentication information is received from the IoT device remote control service providing system 200 through the wireless communication unit 302 of the IoT device 300, The device identification information included in the third authentication information is compared with the authentication device identification information stored in advance to confirm the control right of the user of the remote control terminal. In this case, as the control authority authentication procedure, the control authority authentication unit 310 compares the device identification information included in the third authentication information with the device identification information previously stored in the storage unit 304 of the IoT device 300 , And if they are identical to each other, it can be determined that the control authority authentication is successful.

The operation control unit 320 controls the IoT device 300 to perform a preset operation when the control authority authentication is successful or to perform an operation according to an operation control command received from the system 200 can do. For example, the operation control unit 320 controls the predetermined driving unit 306 for generating the operation of the IoT device 300 so that the corresponding IoT device 300 performs an operation according to the preset operation or the operation control command can do.

FIG. 5 is a flowchart illustrating a service subscriber registration process of a method of providing an IoT device remote control service according to an embodiment of the present invention.

5, in the service subscriber registration process before the IoT device remote control process, the biometric unit 110 of the remote control terminal 100 transmits the remote control terminal 100 through the biometric sensor The biometric information of the user can be obtained by recognizing the biometric information of the user to be used (S510). In this case, the biometric unit 110 of the remote control terminal 100 stores the obtained biometric information in advance in the storage unit 102 of the remote control terminal 100, (S520).

The registration request unit 160 of the remote control terminal 100 then transmits the biometric information of the user obtained through the biometric unit 110 and the terminal identification information of the remote control terminal 100 to the IoT device 100. [ And transmits the request to the remote control service providing system 200 to request the user to register as a subscriber of the IoT device remote control service (S300). For example, when the remote control terminal 100 is implemented as a smart phone or the like, the user can control the device identification information of the IoT device corresponding to the biometric information and the operation of the corresponding IoT device through the remote control terminal 100 And transmits the operation control command to the system 200. If the remote control terminal 100 is implemented by a simple remote control or a smart key, the user accesses a service subscription site provided by the operator through a PC or the like, and obtains device identification information of the IoT device corresponding to the biometric information And an operation control command for controlling the operation of the corresponding IoT device, and may transmit the operation control command to the system 200.

Then, the service subscriber registration unit 250 of the IoT device remote control service providing system 200 receives the terminal identification information, the user biometric information, the control target IoT corresponding to the corresponding biometric information received from the remote control terminal 100 It is possible to register the user as a service subscriber by receiving the registration information including the device identification information of the device and the operation control command for controlling the operation of the corresponding IoT device and storing it in the database 204 of the system 200 (S540). In this case, a plurality of users using the same remote control terminal 100 can be registered as service subscribers, respectively.

When the service subscriber registration process is completed, the users are provided with the IoT device remote control service through the remote control terminal 100.

FIG. 6 is a flowchart illustrating an IoT device remote control process of a method for providing an IoT device remote control service according to an embodiment of the present invention.

6, in the IoT device remote control process, the biometric unit 110 of the remote control terminal 100 recognizes the user's biometric information through the biometric sensor and acquires the biometric information of the user (S610).

Next, the user authentication unit 120 of the remote control terminal 100 may perform a user authentication procedure as a first step authentication procedure (S620). That is, the user authentication unit 120 may compare the obtained biometric information with previously stored biometric information as a user authentication procedure, and authenticate the corresponding user as a party user if they are identical.

Then, when the user is authenticated as a party user by the user authentication unit 120, the first authentication information generation unit 130 of the remote control terminal 100 transmits the encrypted identification information including the terminal identification information 1 authentication information, and the second authentication information generating unit 140 of the remote control terminal 100 may generate the second authentication information including the biometric information (S630). In this case, the second authentication information may be information encrypted by combining the biometric information and the terminal identification information and using the first authentication information as an encryption key.

The authentication information transmitting unit 150 of the remote control terminal 100 then transmits the first authentication information and the second authentication information to the LTE-MTC or the like via the wireless communication unit 104 of the remote control terminal 100 To the IoT device remote control service providing system 200 using the same LPWA (Low Power Wide Area) communication method.

When the authentication information receiving unit 210 of the system 200 communicates with the remote control terminal 100 and receives the first authentication information and the second authentication information, the system 200 performs a second- The terminal registration authentication procedure and the service subscription authentication procedure can be performed (S640, S650).

That is, the terminal registration authentication unit 220 of the system 200 obtains the terminal identification information of the remote control terminal 100 from the authentication information received by the authentication information receiving unit 210, The terminal registration authentication procedure for the remote control terminal 100 can be performed using the identification information (S640). In this case, the terminal registration authenticating unit 220 may obtain the terminal identification information by decrypting the first authentication information or decrypting the second authentication information. Also, the terminal registration authenticating unit 220 compares the terminal identification information acquired from the authentication information with the terminal identification information stored in the database 204 of the system 200, .

In addition, the service subscription authenticating unit 230 of the system 200 acquires the biometric information of the user of the remote control terminal 100 from the authentication information received by the authentication information receiving unit 210, The service subscription authentication procedure for the user can be performed using the service subscription authentication procedure (S650). In this case, the service subscription authenticating unit 230 may decrypt the second authentication information using the first authentication information as a decryption key, and obtain the biometric information from the decrypted second authentication information. Also, the service subscription authenticating unit 230 compares the biometric information of the user acquired from the authentication information with the biometric information stored in the database 204 of the system 200, It can be judged as successful.

Then, the device control unit 240 of the system 200 searches the database 204 of the system 200 if the terminal registration authentication and service subscription authentication are successful, (Step S660), and transmits the generated third authentication information to the control target IoT device 300 (S662). In this case, the third authentication information may be encrypted information including the device identification information of the IoT device 300 to be controlled. According to the embodiment, when the terminal registration authentication and the service subscription authentication are successful, the device control unit 240 searches for the database 204 and controls the operation of the IoT device as an operation control command corresponding to the biometric information It is possible to confirm the operation control command and further transmit the operation control command to the control target IoT device 300. [

When the control target IoT device 300 performs the authentication with the system 200 and receives the third authentication information, the corresponding IoT device 300 can perform a control authorization authentication procedure as a third step authentication procedure (S670 ).

That is, when receiving the third authentication information from the system 200, the control right authentication unit 310 of the IoT device 300 transmits the device identification information included in the third authentication information as the control right authentication procedure The control authority of the user of the remote control terminal can be confirmed by comparing with the previously stored authentication device identification information. In this case, the control authority authentication unit 310 compares the device identification information included in the third authentication information with the device identification information previously stored in the storage unit 304 of the IoT device 300, It can be determined that the control authority authentication is successful.

Then, the operation control unit 320 of the IoT device 300 controls the IoT device 300 to perform a preset operation when the control authority authentication is successful, It is possible to control the operation according to the control command (S680). For example, when the IoT device 300 is an automotive ECU system, the operation control unit 320 of the automotive ECU system may open or close the door of the vehicle or start the engine according to a preset operation when the user control authority authentication is successful. If the IoT device 300 is an IPTV system or the like, the operation control unit 320 of the IPTV system receives an operation control command corresponding to the user's biometric information from the system 200 upon successful authentication of the user control right, An IPTV broadcast channel can be provided differently according to an operation control command. For example, the IPTV system may provide the entire broadcast channel when the user controlling the IPTV system through the remote control terminal 100 is an adult, and may be controlled to provide only a limited broadcast channel if the user is a minor.

Meanwhile, embodiments of the present invention can be realized by recording a computer-readable computer program in a computer-readable recording medium. When embodiments of the present invention are implemented using a computer program, the constituent means of the present invention are program code segments that perform the necessary tasks. The computer program or code segments may be stored in a computer-readable recording medium or in combination with a carrier wave and transmitted in the form of a data signal via a transmission medium or a communication network. A computer-readable recording medium includes all kinds of media for recording data that can be read by a computer system. For example, the computer-readable recording medium may include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like. In addition, the program codes may be stored or executed in a distributed manner by distributing the recording medium to a computer system connected to various networks.

As described above, according to the present invention, the remote control terminal can remotely control the IoT devices using the biometric information of the service subscribers, thereby improving the security and convenience of IoT device control. In particular, a remote control terminal, an IoT device remote control service provision system, and an IoT device interworking for the IoT device remote control service are configured to perform user authentication, remote control terminal and service subscriber authentication, and control authorization authentication, respectively By applying the step authentication scheme, the security and reliability of the IoT device remote control service can be further improved. In addition, by performing information encryption and multi-channel authentication procedures in a cascade using terminal identification information of the remote control terminal and device identification information of the IoT device together with the user's biometric information, the security and reliability of the IoT device remote control service Can be further improved. In addition, the IoT device remote control service providing system manages the biometric information of the service subscribers in a centralized manner and functions as an authentication information mediation system for simplifying the authentication information to be used by each IoT device. The control authority of the user of the remote control terminal can be confirmed by using only simple information such as the unique number of the IoT device without having to separately provide the biometric sensor or the biometric information management module and as a result, While reducing the load on IoT devices and reducing manufacturing costs. In addition, by allowing the user to designate the operation of the control target IoT device and the corresponding IoT device according to the user's biometric information, it is possible to control a plurality of IoT devices with one remote control terminal, It is possible to perform a differentiated operation for each user. Furthermore, it should be understood that the embodiments according to the present invention can solve various technical problems other than those mentioned in the specification in the related technical field as well as the related art.

The present invention has been described with reference to specific embodiments. It will be apparent, however, to one skilled in the art that various modifications may be practiced within the technical scope of the invention. Therefore, the above-described embodiments should be considered from an illustrative point of view, not from a restrictive viewpoint. That is, the scope of the true technical idea of the present invention is set forth in the appended claims, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

100: remote control terminal 110:
120: user authentication unit 130: first authentication information generation unit
140: second authentication information generation unit 150: authentication information transmission unit
160: registration request unit 200: IoT device remote control service providing system
210: authentication information receiving unit 220: terminal registration authentication unit
230: service subscription authenticating unit 240:
250: service subscriber registration unit 300: IoT device

Claims (22)

An authentication information receiving unit for receiving first authentication information including terminal identification information of the remote control terminal and second authentication information including biometric information of a user from a remote control terminal that remotely controls the IoT device;
A terminal registration authentication unit for performing a terminal registration authentication procedure for the remote control terminal using the terminal identification information;
A service subscription authenticating unit for performing a service subscription authenticating procedure for the user using the biometric information; And
When the terminal registration authentication and service subscription authentication are successful, confirms the device identification information of the control target IoT device corresponding to the biometric information, and transmits the third authentication information including the device identification information to the control target IoT device And controlling the control target IoT device to perform a control right authentication procedure for the user. The method according to claim 1,
The system stores registration information including terminal identification information for identifying a remote control terminal of the service subscriber, biometric information of the service subscriber, and device identification information of the IoT device corresponding to the biometric information of the service subscriber, Further comprising a service subscriber registration unit for registering the subscriber. 3. The method of claim 2,
Wherein the service subscriber registration unit further stores an operation control command corresponding to the biometric information of the service subscriber as an operation control command for controlling the operation of the IoT device. The method according to claim 1,
Wherein the first authentication information is information obtained by encrypting the terminal identification information,
Wherein the second authentication information is information obtained by combining the biometric information with the terminal identification information and encrypting the biometric information. 5. The method of claim 4,
Wherein the service subscription authenticating unit decrypts the second authentication information using the first authentication information and obtains the biometric information from the decrypted second authentication information. The method according to claim 1,
The device control unit further transmits an operation control command corresponding to the biometric information to the control target IoT device as an operation control command for controlling the operation of the IoT device when the terminal registration authentication and the service subscription authentication are successful IoT device remote control service providing system. The method according to claim 1,
The remote control terminal compares the biometric information of the user acquired through a predetermined biometric sensor with the biometric information stored in advance as a user authentication procedure, and if the two authentication information match each other, the first authentication information and the second authentication information to the system And transmits the IoT device remote control service. The method according to claim 1,
Wherein the control target IoT device compares the device identification information included in the third authentication information with the device identification information stored in advance as a control authority authentication procedure and performs a preset operation if there is a match with the device identification information. Remote control service providing system. The method according to claim 6,
The control target IoT device compares the device identification information included in the third authentication information with the device identification information stored in advance as the control authority authentication procedure and performs an operation according to the operation control command IoT device remote control service providing system. A method for providing an IoT device remote control service using a remote control terminal that remotely controls an IoT device and a predetermined system that communicates with the IoT device,
An authentication information receiving step of receiving the first authentication information including the terminal identification information of the remote control terminal and the second authentication information including the user's biometric information from the remote control terminal;
A terminal registration authentication step in which the system performs a terminal registration authentication procedure for the remote control terminal using the terminal identification information;
A service subscription authentication step in which the system performs a service subscription authentication procedure for the user using the biometric information; And
When the terminal registration authentication and service subscription authentication are successful, the system confirms the device identification information of the control target IoT device corresponding to the biometric information, and transmits the third authentication information including the device identification information to the control object IoT device and controlling the IoT device to perform a control authority authentication procedure for the user. 11. The method of claim 10,
The method includes storing the registration information including the terminal identification information identifying the remote control terminal of the service subscriber, the biometric information of the service subscriber, and the device identification information of the IoT device corresponding to the biometric information of the service subscriber And registering the service subscriber by the service subscriber registration step. 12. The method of claim 11,
Wherein the service subscriber registration step further includes storing an operation control command corresponding to biometric information of the service subscriber as an operation control command for controlling the operation of the IoT device. 11. The method of claim 10,
Wherein the first authentication information is information obtained by encrypting the terminal identification information,
Wherein the second authentication information is information obtained by combining the terminal identification information and the biometric information. 14. The method of claim 13,
Wherein the service subscription authentication step comprises a step of decrypting the second authentication information using the first authentication information and obtaining the biometric information from the decrypted second authentication information, Delivery method. 11. The method of claim 10,
The device control step may further include transmitting an operation control command corresponding to the biometric information to the control target IoT device as an operation control command for controlling the operation of the IoT device when the terminal registration authentication and the service subscription authentication are successful The method comprising the steps of: 11. The method of claim 10,
The method further includes comparing the biometric information of the user acquired through the biometric sensor with the biometric information stored in the biometric information sensor as the user authentication procedure and comparing the first authentication information and the second authentication information, The method comprising the steps of: transmitting the remote control service to the system; 11. The method of claim 10,
The method further comprises comparing the device identification information included in the third authentication information with the device identification information stored in advance as the control right authentication procedure, and performing a preset operation if the control target IoT device is identical And transmitting the remote control service to the IoT device. 16. The method of claim 15,
The method includes comparing the device identification information included in the third authentication information with the device identification information stored in advance as the control right authentication procedure by the control target IoT device and performing an operation according to the operation control command The method comprising the steps of: receiving an IoT device remote control service; 19. A computer program for executing a method according to any one of claims 10 to 18 via a computer system, the computer program being recorded on a recording medium. A terminal for remotely controlling an IoT device,
A biometric unit for recognizing a user's biometric information through the biometric sensor and acquiring biometric information of the user;
A user authentication unit for authenticating the user as a party user when the biometric information is compared with biometric information stored in advance and there is a mutual identity;
A first authentication information generating unit for generating encrypted first authentication information including terminal identification information of the terminal;
A second authentication information generating unit for generating second authentication information including the biometric information encrypted; And
And an authentication information transmitting unit for transmitting the first authentication information and the second authentication information to a predetermined system providing the IoT device remote control service when the user is authenticated as a party user. 21. The method of claim 20,
Wherein the second authentication information is information encrypted or decrypted using the first authentication information. 21. The method of claim 20,
The terminal further includes a registration request unit for requesting registration of the user as a subscriber of the IoT device remote control service by transmitting the biometric information of the user obtained through the biometric unit and the terminal identification information of the terminal to the system, Wherein the IoT device remote control terminal comprises:

Images