KR20190027062A - Access control system and access control method using the same - Google Patents

Abstract

The present invention relates to an access control system and an access control method using the same. According to an aspect of the present invention, the access control method for issuing an authentication token temporarily applied to an authority change target comprises the steps of: obtaining a request for an authority change for at least one of a user and a door, wherein the request for an authority change includes a change target, a change history, and a change condition; extracting a target to change an authority based on at least one among the change target, the change history, and the change condition; and transmitting the generated authentication token to a user terminal of the extracted target based on the change history and the change condition.

Description

[0001] ACCESS CONTROL SYSTEM AND ACCESS CONTROL METHOD USING THE SAME [0002]

The present invention relates to an access control system and an access control method using the same.

The access management system is a system that recognizes and manages the passengers who want to access the specific space through the door. It is widely used not only in the access control facility where high security is maintained but also in general offices and home.

An authentication method using a magnetic card, a smart card, a noncontact wireless card, etc., and an authentication method using biometric information such as a fingerprint and a Hongjai of a visitor are used as authentication methods conventionally used in such access management systems.

In this conventional authentication method, the passenger has to perform authentication through the authentication device installed near the door to be accessed, so that the passenger can enter and leave the door. In this way, since the authentication is performed through the separate authentication device, there is a problem that it takes a long time to perform authentication when there are a plurality of users. In addition, there is a problem that the user must always provide a separate authentication means such as a magnetic card. If such a separate authentication means is lost, there is a problem that an illegal accessor who uses another authentication means can access the door.

In addition, in the conventional authentication method, since a control server for managing the authentication devices installed near the door is provided and authentication is performed only by using the control server, the communication between the control server and the authentication devices installed near the door is disconnected, There is a problem in that it is impossible to access the door when the door is in the disabled state.

In recent years, efforts have been made to improve the security of the access management system while improving user convenience in order to solve such problems.

An object of the present invention is to provide an access control system and an access control method using the access control system which can increase the security of the access control system as the convenience of the user increases.

It is to be understood that the present invention is not limited to the above-described embodiments and that various changes and modifications may be made without departing from the spirit and scope of the present invention as defined by the following claims .

According to an aspect of the present invention, there is provided an access control method for issuing an authentication token temporarily applied to a permission change object, the access control method comprising: requesting a permission change for at least one of a user and a door; Including a history and a change condition; Extracting an object to which an authority is to be changed based on at least one of the object of change, the change history, and the change condition; And transmitting the authentication token generated based on the change history and the change condition to the extracted user terminal.

According to another aspect of the present invention, a recording medium on which a program for performing the above-described method is recorded can be provided.

According to another aspect of the present invention, there is provided a server apparatus for issuing an authentication token temporarily applied to a rights change object, the server apparatus comprising: a server communication unit; And a request for a change of authority for at least one of a user and a door, the request for change of authority including a change subject, a change history, and a change condition, and wherein the change subject, And a server controller for controlling to transmit the authentication token generated based on the change history and the change condition to the extracted user terminal, based on the change history and the change condition, May be provided.

According to the present invention, the convenience of the user can be enhanced by utilizing the authentication token to allow the authorized door to be opened without requiring additional authentication while the authentication token is valid.

According to the present invention, even in a situation where the authentication server is disabled or communication between the authentication server and the door open / close device is disconnected, the convenience of the user can be increased by allowing the authorized door to be opened while the authentication token is valid.

Further, according to the present invention, it is possible to manage the legitimate use of the user by considering access state information on entry or entry.

According to the present invention, the authentication token can be forcibly updated at the occurrence of a specific event such as an emergency situation, so that the user can be evacuated more quickly and accurately.

Further, according to the present invention, it is possible to strengthen the security against the use of the electronic device of the trespasser by allowing the use of the electronic device in consideration of entry into the space

The effects of the present invention are not limited to the above-mentioned effects, and the effects not mentioned can be clearly understood by those skilled in the art from the present specification and the accompanying drawings.

1 is an environment diagram of an access management system according to an embodiment of the present invention.
2 is a block diagram of an authentication server according to an embodiment of the present invention.
3 is a block diagram of a terminal according to an embodiment of the present invention.
4 is a block diagram of a door opening / closing apparatus according to an embodiment of the present invention.
5 is a diagram illustrating a table showing a data structure of information included in an authentication token according to an embodiment of the present invention.
6 is a flowchart of a method of registering a user according to an embodiment of the present invention.
7 is a flowchart of an authentication token issuing method according to an embodiment of the present invention.
8 is an environment view of a door opening management method according to an embodiment of the present invention.
FIG. 9 is a flowchart of a door open management method according to an embodiment of the present invention.
FIG. 10 is an environment diagram of a method for managing an access state according to an embodiment of the present invention.
FIG. 11 is a flowchart illustrating a method of managing an entrance state according to an embodiment of the present invention.
12 is a flowchart showing a first modification of the access status management method according to an embodiment of the present invention.
13 is a flowchart showing a second modification of the access status management method according to the embodiment of the present invention.
14 is a flowchart showing a third modification of the access status management method according to the embodiment of the present invention.
15 is a flowchart showing a fourth modification of the access status management method according to the embodiment of the present invention.
16 is a flowchart showing a fifth modification of the access status management method according to the embodiment of the present invention.
17 is an environmental view of a door of a measuring structure according to a sixth modification of the present invention.
18 is a flowchart showing a sixth modification of the access status management method according to the embodiment of the present invention.
FIG. 19 is an environment diagram of a method of forcibly changing an authority according to an embodiment of the present invention.
20 is a flowchart illustrating a method of forcibly changing an authority according to an embodiment of the present invention.
FIG. 21 is an exemplary view showing an operation of a door opening / closing apparatus according to an embodiment of the present invention in a general situation and a special event occurrence situation. FIG.
22 is an environment diagram of a local security method according to an embodiment of the present invention.
23 is a flowchart illustrating a local security method according to an exemplary embodiment of the present invention.
24 is a flowchart showing a first modification of the area-based security method according to an embodiment of the present invention.
FIG. 25 is a flowchart showing a second modification of the area-based security method according to an embodiment of the present invention.

The above objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. It is to be understood, however, that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and similarities.

In the drawings, the thicknesses of the layers and regions are exaggerated for clarity and the element or layer is referred to as being "on" or "on" Included in the scope of the present invention is not only directly above another element or layer but also includes intervening layers or other elements in between. Like reference numerals designate like elements throughout the specification. The same reference numerals are used to designate the same components in the same reference numerals in the drawings of the embodiments.

The detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. In addition, numerals (e.g., first, second, etc.) used in the description of the present invention are merely an identifier for distinguishing one component from another.

In addition, the suffix "module" and " part "for constituent elements used in the following description are given or mixed in consideration of ease of specification, and do not have their own meaning or role.

1. Definition of Terms

The terms used in this specification can be defined as follows.

(1) Door

The door may block or permit passage to one area. The door may include a doorframe and a door leaf. The door frame may be a fixed configuration defining a section of the floor where the passage is to be blocked or permitted. The door may be configured such that the position where the passage is blocked or allowed depending on the position may be changed and the position may be varied by an external force. The position variable of the door can be a comprehensive meaning including both the movement of the entire door as well as the movement by rotation. In the present specification, such a doorframe and a door leaf are collectively referred to as a door. Therefore, the movement and the position change of the door described in this specification may mean the movement and position change of the door.

(2) closing / opening of the door

The closing of the door may mean that the door is positioned at a position where it is blocked from passing through one area defined by the door frame, and the opening of the door is a position where a space capable of passing through one area defined by the door frame is secured May be a state in which the door is positioned. As used herein, a state change of a door may be at least one of a state change from closed to open and a state change from open to closed.

The closing operation of the door may be performed to move the door from the open position to the closed position, and the opening operation of the door may be performed to move the door from the closed position to the open position.

Also, in this specification, the closing and opening of the door may include not only a change in the state due to the movement of the door but also a state in which the door can be opened by unlocking or a state in which it can not be opened by locking. Thus, in some embodiments of the present invention, closing the door may mean that the door is locked and opening the door may mean that the door is in the unlocked state.

In one embodiment of the invention, the closing and opening of the door and the locking and unlocking of the door may be independent of each other.

For example, an obstacle may be provided by the lock unit even though the door is not closed. In another example, the door may be in the closed position even though the door is unlocked. Therefore, the door must be locked when the door is closed, and may not necessarily be unlocked when the door is opened.

(3) Locking / unlocking the door

The locking and unlocking may be related to whether or not the opening of the door is possible.

The locking of the door may mean that an external force or an obstacle has been provided so that the door can not be opened, and the unlocking may mean that the provision of the external force or the obstacle is released so that the door can be opened.

Further, the locking operation of the door may be performed to provide an external force and / or an obstacle so that the door can not be opened, and the unlocking operation of the door may provide an external force and / And then performing a releasing process.

(4) Access

Access can be through the space defined by the door frame by the user. The entrance and exit can be divided into the entrance of the user moving from the outside of the door to the inside of the door and the entrance of the user moving from the inside of the door to the outside of the door.

(5) Inner / outer side of the door

The inside of the door means an area where the position of a person who is not authorized to enter the door is controlled and the outside of the door can mean the opposite side of the inside with respect to the door. For example, a user having a legitimate access right to a specific door, according to embodiments of the present invention, can enter the interior from the outside of the specific door but does not have a legitimate access right, The door can not enter from the outside to the inside of the specific door.

(6) Token

In this specification, the token may be data in a predetermined format including at least a part of information used in the access management system. In this specification, tokens may be distinguished by authentication tokens, update tokens, and the like depending on their use. The distinction between such an authentication token and an update token may be such that the information contained in the token is different from each other and the format of the token is the same. However, the authentication token and the update token need not always have the same format. According to the embodiment, the authentication token and the update token may be provided in different formats. In this specification, the type of the token includes an authentication token and an update token The format of the token may be any of the formats defined by the service provider. In addition, JWT (Json Web Token), Security Assertion Markup Language (SAML), and XrML (eXtensible rights Markup Language).

(7) User identification information

The user identification information may be information for identifying a specific user among a plurality of users in the access management system 10000 of the present invention. Illustratively, the user identification information may be identification information uniquely assigned to the user, such as an ID.

(8) User information

The user information may be information used to generate the above-described user identification information. For example, the user information may be personal information of the user, and may be information required to confirm that the user is normally the user, such as a resident registration number, a date of birth, an address, a company office number, and a mobile phone number.

(9) Terminal identification information

The terminal identification information may be information for identifying a specific user terminal among a plurality of user terminals. For example, the terminal identification information may include a UUID (Universal Unique Identifier), a UID (Unique Identifier), an IP address of a terminal, a MAC address, a CPU (MCU) serial number or an HDD serial number, Number, < / RTI >

(10) Door identification information

The door identification information may be information for identifying a specific door among a plurality of doors. For example, the door identification information may be at least one of the identification information assigned to the door and the identification information assigned to the door opening / closing apparatus. The door identification information may be stored in the door storage unit. Also in accordance with some embodiments of the present invention, door identification information may be included in the authentication token.

2. System Configuration

1 is an environment view of an access management system 10000 according to an embodiment of the present invention.

1, the access management system 10000 may include an authentication server 1000, a terminal 2000, a door open / close device 3000, a door 4000, and a third party authentication server 5000.

The authentication server 1000 may be connected to an external electronic device. Hereinafter, the fact that a specific device is connected to another device means that the specific device is physically connected to another device, that the specific device is electrically connected to another device, or that the specific device and the other device are communicatively connected And may include at least one. In the above example, the fact that the authentication server 1000 is connected to the external electronic device means that the authentication server 1000 and the external electronic device are communicatively connected to each other. For example, the authentication server 1000 and the external electronic device Can transmit and receive data to and from each other.

According to some embodiments of the present invention, the authentication server 1000 may be connected to the terminal 2000. Also, according to some embodiments of the present invention, the authentication server 1000 may be connected to the third party authentication server 5000. Also, although not shown in FIG. 1, according to some embodiments of the present invention, the authentication server 1000 may be connected to the office electronic apparatus 6000, the hotel controller 7000, and the like. According to an embodiment of the present invention, the authentication server 1000 can perform authentication.

The authentication server 1000 can perform authentication for the user of the terminal 2000. [ Or the authentication server 1000 may perform authentication for the terminal 2000 itself.

The terminal 2000 may be connected to the authentication server 1000 and the door opening and closing apparatus 3000. The terminal 2000 may provide the authentication server 1000 with data necessary for user registration and authentication. Also, the terminal 2000 can transmit data required for the door open request to the door open / close apparatus 3000 and obtain data on the result of the open request from the door open / close apparatus 3000. In addition, the terminal 2000 can exchange various data with the authentication server 1000 and the door open / close device 3000.

The terminal 2000 can also provide an application for performing some embodiments to be described later.

The terminal 2000 may be, for example, a smart phone, a tablet, a PDA, a notebook, and a wearable device. As another example, the terminal 2000 may be a smart card, an IC card, a magnetic card, and an RF chip capable of recording data.

The terminal 2000 may be divided into a user terminal 2000a and an administrator terminal 2000b according to its role.

The door opening / closing apparatus 3000 can control opening or closing of the door 4000. [

For example, the door opening / closing apparatus 3000 may be installed on the door 4000 to control locking or unlocking of the door 4000. [ The door opening / closing apparatus 3000 is not necessarily installed in the door, and may be provided in various forms depending on the selection. For example, the door opening / closing apparatus 3000 may be installed on a wall adjacent to the door to provide or release an obstacle to the door. The door opening / closing apparatus 3000 may open or close the door 4000 by changing the position of the door when the door 4000 is an automatic door.

The door 4000 can also block or allow passage to one area.

The state of the door 4000 can be changed by the door opening / closing apparatus 3000.

Also, according to some embodiments of the present invention, the plurality of door opening / closing apparatuses 3000 may be connected to each other. For example, as shown in FIG. 1, the first door opening / closing apparatus 3000a and the second door opening / closing apparatus 3000b may be connected to each other. Also, a greater number of door opening / closing devices 3000 than the number shown in Fig. 1 can be connected to each other. In addition, in the plurality of door opening / closing apparatuses 3000, all the door opening / closing apparatuses 3000 are not necessarily connected to each other, but may be connected in a serial form. For example, the first door opening / closing apparatus 3000a may be connected to the second door opening / closing apparatus 3000b, and the second door opening / closing apparatus 3000b may be connected to a third door opening / closing apparatus (not shown) have. In addition, a plurality of door opening / closing apparatuses 3000 may be provided in parallel to one door opening / closing apparatus 3000 according to the selection. The connection between the plurality of door opening / closing apparatuses 3000 is not limited to the above-described example, and may be provided in various forms depending on the selection.

Also, the connection between the plurality of door opening / closing apparatuses 3000 is not essential, and the plurality of door opening / closing apparatuses 3000 according to some embodiments of the present invention may be provided in a form not connected to each other.

However, the environment diagram shown in FIG. 1 is merely an example for convenience of explanation and is not limited thereto. According to some embodiments of the present invention, configurations may be added to or excluded from the environment diagram of FIG. 1, and further subdivided.

2 is a block diagram of an authentication server 1000 according to an embodiment of the present invention.

2, the authentication server 1000 may include a server communication unit 1100, a server input unit 1200, a server storage unit 1300, a server display unit 1400, and a server control unit 1500.

The server communication unit 1100 can connect the authentication server 1000 to an external electronic device. That is, the server communication unit 1100 can transmit / receive data to / from an external electronic device. Also, the server communication unit 1100 can maintain or release the communication connection with the terminal 2000 as needed. The server communication unit 1100 may be provided to maintain connection with the terminal 2000 at all times according to the embodiment.

The server communication unit 1100 may be a communication module supporting at least one of a wired communication method and a wireless communication method.

The server input unit 1200 may obtain an electrical signal corresponding to a user input. For example, the server input unit 1200 may include a keypad, a keyboard, a switch, a button, a touch screen, and the like.

The server storage unit 1300 may store data.

For example, the server storage unit 1300 may store data acquired from the terminal 2000. In another example, the server storage unit 1300 may store a program necessary for the operation of the authentication server 1000.

The server display unit 1400 can output visual information.

For example, the server display unit 1400 may be an LCD, an OLED, an amorphous display, or the like.

The server control unit 1500 can collectively manage the operation of the authentication server 1000.

The authentication server 1000 of the present invention does not necessarily have to include all of the above-described configurations, and may be provided in a form in which some configurations are excluded according to the selection. For example, if the authentication server 1000 does not provide direct visual information, the authentication server 1000 may be provided in a form in which the server display unit 1400 is omitted. Also, the authentication server 1000 may be provided in a form in which a configuration for performing additional functions and operations is added according to the selection.

3 is a block diagram of a terminal 2000 according to an embodiment of the present invention.

3, the terminal 2000 includes a terminal communication unit 2100, a terminal display unit 2200, a terminal input unit 2300, a location information collection unit 2400, a terminal storage unit 2500, and a terminal control unit 2600 .

The terminal communication unit 2100 can connect the terminal 2000 with an external electronic device. For example, the terminal communication unit 2100 may connect the user terminal 2000a to external electronic devices such as the authentication server 1000, the door open / close device 3000, and the third party authentication server 5000. Also, the terminal communication unit 2100 may be a communication module supporting wired and / or wireless communication.

The terminal display unit 2200 can output visual information.

When the terminal display unit 2200 is provided as a touch screen, the terminal display unit 1200 can perform the function of the terminal input unit 2300. In this case, a separate terminal input unit 2300 may not be provided according to the selection, and a terminal input unit 2300 for performing a limited function such as volume control, power button, and home button may be provided.

The terminal input unit 2300 may acquire a signal corresponding to a user's input.

The terminal input unit 2300 may be implemented by, for example, a keyboard, a keypad, a button, a jog shuttle, and a wheel.

The user's input may also be, for example, a button press, a touch, a drag, and the like.

When the terminal display unit 2200 is implemented as a touch screen, the terminal display unit 2200 may serve as the terminal input unit 2300.

The location information collecting unit 2400 can acquire location information for the terminal 2000 to determine its location. For example, the position information collecting unit may be a module for acquiring coordinate information for determining a position, such as a GPS module.

The terminal storage unit 2400 may store data.

The terminal storage unit 2400 may be embodied as, for example, a flash memory, a RAM, a ROM, an SSD, an SD CARD, and an optical disk.

The terminal storage unit 2400 may store data necessary for the operation of the terminal 2000. [

The terminal control unit 2500 can collectively control the operation of the terminal 2000.

4 is a block diagram of a door opening / closing apparatus 3000 according to an embodiment of the present invention.

4, the door opening / closing apparatus 3000 includes a door communication unit 3100, a door display unit 3200, a door audio output unit 3300, a door sensor unit 3400, a door storage unit 3500, A door control unit 3600, and a door control unit 3700.

The door communication unit 3100 may be a communication module capable of communicating with an external electronic device.

The door communication unit 3100 can connect the door opening / closing apparatus 3000 and the terminal 2000.

The door communication unit 3100 can connect the communication using a wireless communication scheme. For example, the door communication unit 3100 may include a wireless Internet interface such as a WLAN (Wireless LAN), a WiFi (Wireless Fidelity), and a WiFi Direct, and a wireless communication unit such as a Bluetooth, a Bluetooth low energy (BLE), an Infrared Data Association ) Or the like. The door communication unit 3100 may be a reader capable of reading information from an external electronic device such as an RF reader, an IC reader, and a magnetic reader.

The door display unit 3200 can output visual information.

The door display unit 3200 can output information for visually providing to the user. When the door display unit 3200 includes a touch panel, the door display unit 3200 can operate as an input device based on the touch input.

The door audio output unit 3300 can output information for audibly providing to the user.

For example, the audio output unit 3300 may be a speaker and a buzzer for outputting sounds.

The door sensor unit 3400 can acquire a signal for the external environment necessary for the door opening and closing apparatus 3000. For example, the door sensor unit 3400 may acquire a signal about a distance between the user and the object. In another example, the door sensor unit 3400 may acquire a signal necessary for determining the position of the door

The door storage unit 3500 may store a program for performing a control operation of the door control unit 3700 and may store data received from the outside and data generated from the door control unit 3700.

The door power section 3600 can provide the necessary power to lock or unlock the door. Also, the door power section 3600 can provide power necessary for opening or closing the door when the door 4000 is implemented as an automatic door.

The door power section 3600 may be provided with a motor, a solenoid, an actuator, or the like.

When the door power section 3600 provides the power necessary to lock or unlock the door, the door power section 3600 can provide power to change and / or maintain the lock unit in a locked or unlocked state. The lock unit (not shown) may be provided, for example, with a deadbolt, a latch bolt, or a combination thereof. Further, the lock unit is not limited to the dead bolt and the latch bolt described in the examples, and commonly used lock units can be used.

The door control unit 3600 controls the overall operation of the door opening / closing apparatus 3000.

The door control unit 3600 can control the operation of some configurations included in the door opening / closing apparatus 3000. Further, the door control unit 3600 can acquire signals from several configurations included in the door opening / closing apparatus 3000. Also, the door control unit 3600 may control an operation for performing several steps performed in the door opening / closing apparatus 3000 during the steps described in the methods to be described later, or perform an operation necessary for performing the step.

The components, operations, terms, and the like included in the access management system 10000 and the access management system 10000 according to various embodiments of the present invention have been described above. The components, operations, terms, and the like included in the access management system 10000 and the access management system 10000 will be applied to various methods and embodiments to be described below. However, It is clear that the management system 10000 does not necessarily have to have the above-described configuration and functions, and that the present invention can also be applied to an access management system configured differently from the above-described access management system 10000. [

3. Authentication and renewal tokens

3.1 Overview of Authentication Tokens

The authentication token may be data that can be used to determine the authority granted to the issuance subject by the data issued by the authentication server 1000 to the issuance target. Here, the issuance target may include at least one of the user and the terminal 2000. An issuance target can be divided into a user and a terminal 2000, but issuance of an authentication token can be performed by transmitting an authentication token to the terminal 2000. [

The authentication token may include various information, and the information included in the authentication token will be described in more detail in FIG.

5 is a diagram illustrating a table showing a data structure of information included in an authentication token according to an embodiment of the present invention.

Referring to FIG. 5, an authentication token according to some embodiments of the present invention may include at least one of rights information, validity condition, issuer information, and recipient information indicating rights granted to an issuance target. However, the authentication token of the present invention is not limited thereto, and only some information may be excluded or various additional information may be added according to the selection.

Hereinafter, various information that can be included in the authentication token will be described in more detail.

According to some embodiments of the present invention, the authentication token may include authorization information.

According to some embodiments of the present invention, the authority information may be information used to determine whether at least one of the doors 4000 is authorized to access the specific door.

Also, according to some embodiments of the present invention, the authority information may be information used for determining whether or not the issuance object is authorized to access the specific space among at least one space. Accordingly, the authority information can be granted authority to all the drawings provided in the space when the space is authorized.

Further, according to some embodiments of the present invention, the rights information may be information that can determine whether the function or the use of the electronic device is authorized. Here, the function relates to a service provided by an electronic device, and may be a function of, for example, mail, web surfing, USB use and editing. Also, if the authority information includes authority to the function, the authority information can be used to judge whether the user has permission to view the mail, whether the user has permission to send mail, whether the user has permission to use the USB port . The electronic device may also mean electronic equipment such as office electronic equipment such as a PC, a printer, and a fax machine, and electronic equipment used in a hotel room or a home, such as a lamp, an air conditioner, a radiator, and a TV.

In one embodiment, the rights information may be generated based on rights set on the issuance target.

According to some embodiments of the present invention, the authentication server 1000 may store the rights set in the issuance target in advance. The authentication server 1000 can acquire the authority setting information on the authority to be set from the administrator terminal 2000b to the issuance target and can set the authority to the issuance target based on the acquired authority setting information. The authority setting information is not necessarily acquired through the administrator terminal 2000b, but may be acquired in various manners according to the embodiment. For example, the authentication server 1000 can obtain the authority setting information from the administrator through the server input unit 1200. [

When the issuance target is a user, the authentication server 1000 can set rights for each user registered in advance and can store the set authority. Also, when the issuance target is the terminal 2000, the authentication server 1000 can set and store rights for each terminal 2000 registered in advance.

The setting of authority does not necessarily have to be performed for each individual issuing subject, and the setting of authority can be performed for each issuing subject grouped according to the selection. For example, if the issuer is grouped by class, all issuers grouped as class A can have the first type of authority, and for all issuers grouped as class B, the second type of authority can be set .

The authority information to be included in the authentication information can be determined based on the set authority.

The authorization information according to some embodiments of the present invention may include at least one of information on the access right of the door and information on the function or usage right of the electronic device.

When the right information is information on the access right of the door, the right information may include at least one of the door identification information and the right value.

The door identification information may include at least a part of the door identification information included in the door identification information list stored in advance in the authentication server 1000.

The authority information may include authorized door identification information. Or the authority information may include the whole door identification information registered in the authentication server 1000. [

The authority information may include an authority value corresponding to the door identification information. The authority value can be divided into a value indicating that the authority is granted and a value indicating that the authority is not authorized. For example, as shown in FIG. 5, the authentication token may include a 'first door', which is identification information for the first door, and a right value '1', which indicates that the first door is authorized. As another example, as shown in FIG. 5, the authentication token may include the 'second door', which is identification information for the second door, and the authorization value '0', which indicates that the second door is not authorized.

The authorization token according to some embodiments of the present invention may be omitted from the authorization value. In this case, the door opening / closing apparatus 3000 can judge whether or not it is authorized based on whether or not identification information on the door opening / closing apparatus 3000 or the door 4000 that received the authentication token is included in the authentication token . For example, the door opening / closing apparatus 3000 can determine that the authentication token is authorized when the authentication information includes the identification information of the door opening / closing apparatus 3000 or the door 4000 that received the authentication token.

The privilege information according to some embodiments of the present invention may be information on a use right of the function.

The rights information may include authorized functions and electronic devices. Or the authority information may include functions and electronic devices registered in the authentication server 1000. [

In this case, the authority information may include identification information that can identify the function and the electronic device, as in the embodiment of the door opening / closing apparatus 3000. In addition, the authority information may include a permission value indicating whether or not the function and the electronic device are authorized.

The authentication token may also include an authentication validity condition.

The authentication token may be limited in duration after it is determined to be valid after publication. Whether the authentication token is valid up to which point may depend on the authentication validity condition.

According to some embodiments of the present invention, whether or not the authentication token is valid may be determined by at least one of the terminal 2000 and the door opening / closing apparatus 3000. Whether or not the authentication token is valid can also be judged based on the validity condition.

The authentication token may further include authentication token status information indicating whether the current authentication token is valid or has expired. The authentication token state information may change depending on the validity or expiration state of the authentication token.

According to some embodiments of the present invention, the terminal 2000 may set the authentication token state information to expire when it is determined that the authentication token has expired. According to some embodiments of the present invention, the terminal 2000 may deny transmission of the authentication token to the door opening / closing apparatus 3000 when it is determined that the authentication token has expired.

Hereinafter, an authentication validity condition of an authentication token according to some embodiments of the present invention will be described as an example.

The validity condition of the authentication token is a condition used to determine whether the authentication token is valid. The validity condition of the authentication may include at least one of the validity time, the location of the user terminal, the number of times of use, And may be provided as a combination of these, as desired. If the authentication validity condition is provided in a combination of various conditions, it can be implemented so that the authentication token is judged to be valid if all of the included conditions are satisfied. Or when the authentication validity condition is provided in a combination of various conditions, it can be provided that the authentication token is determined to be valid if at least one of the included conditions is satisfied.

This validation condition can apply equally to all authentication tokens. And may be differently assigned to each issue object or class according to the selection.

The validity condition of the authentication token according to some embodiments of the present invention may be authentication time. Here, the validity time indicates a predetermined time at which the authentication token can be valid. In one example, the validity time may be started from the time of issuance of the token. The predetermined time may be preset in the authentication server.

For example, an authentication token may include a validity time to be valid for six hours from the time of issuance. The authentication token may include time information on the time of issuance and information on how much time elapses from the occurrence time. The subject determining whether the authentication token is valid may determine whether or not the authentication token is valid based on whether or not the current time for determining whether the authentication token is valid is after a valid time from the issuance time has elapsed. For example, if the issuance time of the authentication token is 00:00 and the validity condition is within 6 hours from the issuance time, the door open / It can be determined that the token is valid, and it can be determined that the authentication token is invalid when the current time for determining whether the authentication token is valid is 7:00. Here, the authentication determination subject may be at least one of the authentication server 1000, the terminal 2000, and the door opening / closing device 3000, which determines whether or not the authentication is performed.

As another example, the authentication token may include elapsed time information for determining whether a time has elapsed from the time of issuance. When the value according to the elapsed time information gradually increases and reaches a threshold value determined to be expired, the authentication token may be judged to have expired. The authentication token may be judged to have expired when the value corresponding to the elapsed time information gradually decreases according to the selection and reaches the threshold value.

The validity condition of the authentication token according to some embodiments of the present invention may be a location.

If the validity condition is a location, the authentication token may be valid only at a predetermined location. That is, if the authentication token is out of a predetermined position, it can be determined that the authentication token has expired. Whether or not the authentication token is valid when the validity condition of the authentication token is the position can be judged based on the position information obtained from the position information collection unit 2400. [

If the determination subject is the authentication server 1000 and the door opening / closing device 3000, not the terminal 2000, the terminal 2000 can determine whether the authentication token is valid based on the location information of the terminal 2000 The location information may be provided to the judging entity. The location information may be at least one of location information of the terminal location at the time when the authentication token is issued and current terminal location.

For example, when the location range included in the validity condition is in the range of 100 m from the company building, the door open / close device 3000 determines that the location where the authentication token is issued is out of the range of the location included in the validity condition. .

For example, if the location range included in the validity condition is within the range of 100 m from the company building, the door open / close device 3000 compares the location information acquired from the terminal 2000 with the location range included in the validity condition If the location information is out of the location range included in the validity condition, it can be determined that the authentication token is not valid.

For example, when the terminal 2000 determines that the current location information is out of the location range included in the validity condition, the terminal 2000 may determine that the authentication token is in an expired state and change the state of the authentication token to expire.

The range of positions included in the validity condition may be differently assigned to each issue object or class.

In addition, the predetermined position may be a predetermined region based on a specific position as well as one position. For example, if the validity condition is a location as shown in FIG. 5, the validity condition may include a range of the location information.

The validity condition of the authentication token according to some embodiments of the present invention may be the number of times of use. Here, the use of the authentication token may be the operation of transmitting the authentication token to the service provider. Or the use of an authentication token may be authorized after transferring the authentication token to the service provider. If the validity condition is a usage count, the authentication token may be valid only for a predetermined number of usage times. That is, when the predetermined number of times of use is exceeded, or when the predetermined number of times of use is exhausted, it can be judged that the authentication token has expired. The authentication token may also include information that can determine the number of uses. The information that can determine the number of times of use is not necessarily included in the authentication token, but may be provided as information separate from the authentication token.

For example, when the number of times of use of the validity condition is five, if the authentication token is transmitted five times to the door opening / closing apparatus 3000, the authentication token may be judged to have expired.

In another example, if the number of times of use of the validity condition is seven, the authentication token is sent to the door opening / closing device 3000 and the door opening of the seventh door is approved, the authentication token may be judged to have expired.

In another example, if the number of times of use of the validity condition is three, and the authentication token is transmitted to the door open / close device 3000 but the access authentication fails (for example, when the rejection message is received three times) It can be judged that it has expired.

According to some embodiments of the invention, the authentication token may include access status information.

The access status information may be information for determining whether the user is in the entered state or in the advanced state. More specific embodiments related to access status information will be described in more detail in 4.2 Access status management method.

According to some embodiments of the invention, the authentication token may include issuer information.

The issuer information may be identification information for identifying the authentication server 1000 that issued the authentication token. The issuer information may be identification information for identifying a service provider operating the authentication server 1000 that issued the authentication token. The issuer information may be used to determine whether it is an authentication token issued from a legitimate issuer to prevent hacking, forgery, and the like.

According to some embodiments of the invention, the authentication token may include recipient information.

The authentication token may be issued to at least one of the user and the terminal (2000).

Thus, the recipient information may be information for identifying to whom the authentication token was issued. The recipient information may include at least one of user identification information and terminal identification information.

According to some embodiments of the invention, the authentication token may include authentication token state information.

The authentication token state information may be information indicating whether the authentication token is in the 'valid' state or the 'expired' state.

3.2 Issuing Authentication Tokens

3.2.1 User registration (user registration and authority setting)

Hereinafter, a user registration method according to an embodiment of the present invention will be described with reference to FIG.

The user registration described below may register at least one of the information on the user using the access management system 10000 and the user terminal 2000a to be used by the user in the authentication server 1000.

6 is a flowchart of a method of registering a user according to an embodiment of the present invention.

Referring to FIG. 6, a user registration method according to an embodiment of the present invention includes acquiring user information (S100), registering user information (S110), and setting a right for user information (S140) .

According to some embodiments of the present invention, the step of acquiring user information may be performed (S110). Obtaining the user information may be the step of the authentication server 1000 obtaining at least one of the user information and the terminal identification information.

The authentication server 1000 can acquire user information in various ways.

The authentication server 1000 can acquire the user information from the user terminal 2000a. Also, the authentication server 1000 can acquire the user information from the third party authentication server 5000.

When the authentication server 1000 acquires user information from the user terminal 2000a, the authentication server 1000 can receive and acquire user information from the user terminal 2000a. For example, the user terminal 2000a may receive the user information from the user, and may transmit the acquired user information to the authentication server 1000.

When the authentication server 1000 acquires the user information from the third party authentication server 5000 designated by the user, the authentication server 1000 transmits the user information from the user terminal 2000a to the third party authentication server 5000 Can be obtained. The authentication server 1000 can obtain user information by requesting the third party authentication server 5000 to provide the user information.

The acquisition of the user information described above is merely an example for convenience of description, and various commonly used user information providing methods may be used.

Further, according to some embodiments of the present invention, the step of registering the obtained user information may be performed (S110). The step of registering the user information may be started by the authentication server 1000. [ The registration of the user information may be performed by assigning unique user identification information to the issuance subject and storing it in matching with the user information.

The user information given to the issuance subject can be arbitrarily determined by the authentication server 1000. [ Also, the authentication server 1000 may grant the user identification information requested from the user terminal 2000a to the issuance target.

The authentication server 1000 may transmit user identification information to the user terminal 2000a so that the user can recognize the user identification information.

Also, the authentication server 1000 can set a security key corresponding to the user identification information. The security key corresponding to the user identification information can be obtained from the user terminal 2000a. Also, the corresponding security key may be generated and obtained by the authentication server 1000 as the user identification information. When the security key is generated and set by the authentication server 1000, the authentication server 1000 can transmit the security key set to the user terminal 2000a so that the user can recognize the security key.

In addition, according to some embodiments of the present invention, a step of setting rights for registered user information may be performed (S130). The step of setting the authority for the user information may be initiated by the authentication server 1000.

The permission setting can be set based on the permission setting information as described in the overview of the authentication token previously.

The authentication server 1000 may store the user information and the right information corresponding to the user information.

3.2.2 Issuance of User Authentication and Tokens

Hereinafter, a user authentication and token issuing method according to an embodiment of the present invention will be described with reference to FIG.

7 is a flowchart of an authentication token issuing method according to an embodiment of the present invention.

Referring to FIG. 7, a step S200 of obtaining authentication token issuance request information, a step S210 of performing user authentication, a step S220 of generating an authentication token, and a step S230 of transmitting an authentication token to a user terminal ).

According to some embodiments of the present invention, obtaining authentication token issuance request information may be performed (S200). The step of acquiring the authentication token issuance request information may be the step of the authentication server 1000 acquiring the authentication token issuance request information from the user terminal 2000a.

The authentication token issue request information may include user identification information and a secret key.

Accordingly, the authentication server 1000 can obtain the user identification information and the security key from the user terminal 2000a.

According to some embodiments of the present invention, a step of performing user authentication may be performed (S210).

The authentication server 1000 can determine whether the user of the user terminal 2000a requesting the issuance of the authentication token is a legitimate user.

The authentication server 1000 can determine whether the user is a legitimate user based on the acquired user identification information and whether or not the security key corresponding to the user identification information is valid.

The authentication server 1000 can determine whether the user identification information acquired from the user terminal 2000a and the security key corresponding to the user identification information are valid.

The authentication server 1000 can determine that the acquired user identification information is valid when the user identification information acquired from the user terminal 2000a is registered in advance.

In addition, the authentication server 1000 may determine that the security key is valid when the acquired security key corresponds to the security key stored in correspondence with the user identification information.

The authentication server 1000 can determine that the user is a legitimate user when both the obtained user identification information and the security key are valid.

Also, the authentication server 1000 may obtain at least one of the user information, the user identification information, and the security key from the third party authentication server 5000 to determine whether the user is a legitimate user.

Also, the authentication server 1000 can obtain the authentication result from the third party authentication server 5000 and determine whether the user is a legitimate user.

If it is determined that the authentication server 1000 is not a legitimate user, the authentication server 1000 may transmit a message to the user terminal 2000a indicating that authentication has failed.

According to some embodiments of the invention, a step of generating an authentication token may be performed (S220).

The authentication server 1000 may generate an authentication token to be transmitted to the user terminal 2000a if the user is a legitimate user. The authentication server 1000 can generate an authentication token based on the authorization information added to the user identification information.

According to some embodiments of the present invention, the step of transmitting the authentication token to the user terminal 2000a may be performed (S230).

The authentication server 1000 can transmit the generated authentication token to the user terminal 2000a. Also, the authentication server 1000 may generate an update token corresponding to the authentication token and transmit the update token to the user terminal 2000a.

3.3 Updating Tokens

3.3.1 Update Token

As described above, the authentication token may be valid or expired depending on a predetermined condition.

That is, the authentication token can be set to conditions such as the validity time, the validity of the authentication token, and the condition under which the authentication token is valid. If these validation conditions are not met, the authentication token must be renewed or reissued.

An update token in accordance with some embodiments of the invention may be used to update the authentication token. The update token may be used to obtain an update to a new authentication token before the authentication token expires or expires. If there is no renewal token, if the authentication token expires, it may be troublesome to re-authenticate to receive the authentication token again. In order to solve this inconvenience, while the renewal token is valid, the renewal token is used to issue the authentication token as a new token without additional authentication, thereby enhancing user convenience.

The update token may include update token identification information, update conditions, authentication token identification information for the corresponding authentication token, and validity condition of the update token.

The update token identification information may be information for identifying a plurality of update tokens issued.

The update condition may be a condition for updating the authentication token. The update condition will be described in detail in 4.4 Update of authentication token to be described later.

The corresponding authentication token identification information may be identification information for the authentication token to be updated through the update token.

The update token may contain a validation condition.

For example, the update token may be limited in duration after it is determined to be valid after publication. Whether the update token is valid up to which point may vary depending on the validity condition.

The validity condition of the update token may be the elapsed time from the issuance time, the number of updates, the location of the user terminal, and the request from the authentication server.

The validity condition of the update token can be applied to the validity condition of the authentication token.

According to some embodiments of the invention, the validity condition of the update token may be the time elapsed from the time of issue.

For example, an update token may include a validity time to be valid for 6 hours from the time of publication. The update token may include time information about the time of issuance and information on how long after the occurrence time the validity is valid. The subject determining whether the update token is valid may determine whether or not the update token is valid based on whether or not the current time for determining whether the update token is valid is after a valid time from the issuance time has elapsed. More specifically, when the issuance time of the update token is 00:00 and the validity condition is within 6 hours from the issuance time, the terminal 2000 determines that the update token is valid when the current time for determining whether the update token is valid is 5:00 It can be determined that the update token is valid, and it can be determined that the update token is invalid if the current time for determining whether the update token is valid is 7:00. Here, the validity determination subject may be at least one of the authentication server 1000, the terminal 2000, and the door opening / closing device 3000, which determines whether the update token is valid.

As another example, the update token may include elapsed time information for determining whether a time has elapsed from the time of issuance. If the value according to the elapsed time information gradually increases and reaches a threshold value determined to be expired, the update token may be judged to have expired. If the value corresponding to the elapsed time information gradually decreases according to the selection and reaches the threshold value, it can be determined that the update token has expired.

According to some embodiments of the invention, the validity condition of the update token may be the number of updates.

For example, if the number of times of use of the validity condition is five, if the update token is sent five times to the authentication server 1000 for updating the authentication token, the update token may be judged to have expired.

In another example, if the number of times of use of the validity condition is seven, the update token may be determined to have expired when the update token is transmitted to the authentication server 1000 to obtain the updated authentication token seven times.

As another example, if the number of times the validity condition is used is three, the update token is transmitted to the authentication server 1000, and if the rejection message is received, the update token may be determined to have expired. According to some embodiments of the invention, the validity condition of the update token may be the location of the terminal 2000.

When the terminal 2000 is in the predetermined position, the update token may be determined to be valid, and it may be determined that the update token is not valid when the terminal 2000 is out of the predetermined position.

If the determination subject is the authentication server 1000 rather than the terminal 2000, the terminal 2000 may request the authentication server 1000 to determine whether the update token is valid based on the location information of the terminal 2000 1000). ≪ / RTI > The location information may be at least one of the location information of the terminal location at the time when the update token is issued and the current terminal location. In the case of the update token, since the update token is also issued while the initial authentication token is issued, the position information at the time of issuance of the authentication token and the position at the time of issuance of the update token may be the same. Accordingly, the location information at the time of issuance of the update token can be replaced with the location information at the time of issuance of the authentication token.

For example, when the location range included in the validity condition is in the range of 100 m based on the company building, the door open / close device 3000 determines that the update token is not valid if the location to which the update token is issued is out of the range .

For example, if the location range included in the validity condition is within the range of 100 m from the company building, the door open / close device 3000 compares the location information acquired from the terminal 2000 with the location range included in the validity condition If the location information is out of the location range included in the validity condition, it can be determined that the update token is not valid.

The terminal 2000 may determine that the update token is in an expired state and change the state of the authentication token to expire if it is determined that the current location information is out of the location range included in the validity condition. Authentication server 1000 can refuse to update the authentication token.

3.3.2 Update of the authentication token Example )

According to some embodiments of the invention, the authentication token may be updated.

Updating of the authentication token may mean issuing a new authentication token from the authentication server. The newly issued authentication token may be identical to the previously issued authentication token and the authorization information. However, when a change is made to the authority, the authority information of the newly issued authentication token and the previously issued authentication token may be different.

Also, the newly issued authentication token may be different from the previously issued authentication token.

The terminal 2000 may send an update token to the authentication server 1000 to request the update of the authentication token.

The authentication server 1000 may transmit to the terminal 2000 an authentication token corresponding to the received update token.

According to some embodiments of the invention, an update condition may be set in the update token.

According to some embodiments of the invention, when the authentication token expires, it may send an update token to the authentication server 1000 to request an update.

For example, when the terminal 2000 determines that the authentication token has expired, the terminal 2000 may request the update of the authentication token by transmitting an update token to the authentication server 1000. [ For example, when the terminal 2000 receives an expiration message indicating that the authentication token has expired from the door open / close apparatus 3000, the terminal 2000 may request the update of the authentication token by transmitting the update token to the authentication server 1000.

According to some embodiments of the present invention, a predetermined time may be set as an update condition in the update token.

The terminal 2000 may transmit an update token to the authentication server 1000 to request update when a predetermined time has elapsed from the time of issuance of the update token.

When the update time comes, the authentication token can be transmitted to the authentication server to request the update.

The update token may include time information remaining until the update time. When the remaining time included in the update token is deducted from the predetermined update time, the update token may be transmitted to the authentication server to request the update of the authentication token.

For example, in the case of the time information of 1000 seconds remaining in the update token, the renewal token may be transmitted to the authentication server at the time of updating from 1000 seconds to 0 seconds to request the update of the authentication token.

As another example, if a time of 1000 seconds is set in the update token, an update token may be sent to the authentication server every 100 seconds to request the update of the authentication token.

According to some embodiments of the present invention, the disclosed authentication token can be updated based on the location whether or not to perform the update.

When the user terminal enters a predetermined position, the update token may be transmitted to the authentication server 1000 to request the update of the authentication token.

According to some embodiments of the present invention, the disclosed authentication token may be updated by determining whether or not to perform the update by a user request.

The terminal 2000 may transmit an update token to the authentication server 1000 and request the update of the authentication token when a user input requesting the update is input.

According to some embodiments of the present invention, the disclosed authentication token may be updated depending on whether the terminal 2000 and the door opening / closing apparatus 3000 are communicatively connected.

In one embodiment, the authentication token can be updated when communication is established between the terminal 2000 and the door open / close device 3000. In this case, the updated authentication token can be transmitted to the door opening / closing apparatus 3000.

The terminal 2000 may transmit an update token to the authentication server 1000 to request the update of the authentication token when the communication with the door opening and closing apparatus 3000 is connected.

The terminal 2000 can transmit the updated authentication token to the door opening / closing apparatus 3000. [

According to some embodiments of the present invention, the disclosed authentication token can be updated when receiving the door opening determination result from the door opening / closing apparatus 3000. For example, the terminal 2000 may transmit an authentication token to the door opening / closing apparatus 3000 to receive a result of the door opening determination.

When the terminal 2000 receives the door open determination result from the door opening / closing apparatus 3000, the terminal 2000 may transmit the update token to the authentication server to request the update of the authentication token.

The update token according to some embodiments of the present invention may be updated according to certain conditions. According to some embodiments of the invention, both the authentication token and the renewal token may expire according to the validity conditions described above. If both the authentication token and the renewal token have expired, the authentication token and the renewal token may need to be re-issued through re-authentication. When both the authentication token and the renewal token have expired, the authentication server 1000 can issue an authentication token and an update token to the terminal 2000 after performing the user authentication.

According to some embodiments of the invention, the update token may be updated.

If the validity period of the update token is within a predetermined time, the update token may be updated.

For example, when the authentication server 1000 obtains the update token from the terminal 2000 for updating the authentication token, if the remaining time until the expiration of the update token is within a predetermined period, the authentication server 1000 updates the update token to the terminal 2000 Lt; / RTI > Update of the update token of the authentication server 1000 may be initialization of the remaining period until expiration.

In another example, the terminal 2000 may request the update token authentication server 1000 to update the update token if the period remaining until the expiration of the update token is within a predetermined period.

According to some embodiments of the invention, the update token may be updated if the terminal 2000 is at a predetermined location.

According to some embodiments of the present invention, the disclosed update token may be updated by determining whether the update is performed by a user request.

The terminal 2000 may send an update token to the authentication server 1000 to request the update of the authentication token when a user input requesting update of the update token is input.

The authentication server 1000 may determine whether the received update token is valid, and then transmit the authentication token corresponding to the update token to the terminal 2000 if valid. Also, if the received update token is invalid, the authentication server 1000 determines that the update can not be performed and transmits a message to the terminal 2000 indicating that the update can not be performed.

The authentication server 1000 can determine whether or not the update token is valid based on the elapsed time from the issuance time, the location of the terminal 2000, the number of update of the update token, and the like.

The authentication server 1000 may also acquire the location information of the terminal 2000 from the terminal 2000 to determine whether the update token is valid based on the location of the terminal 2000. [

4. Utilization of authentication token

The access management system 10000 of the present invention can perform various operations using the obtained authentication token.

Hereinafter, each of the various detailed embodiments in the access management system 10000 will be described in more detail.

Hereinafter, for convenience of explanation, the process after the user terminal 2000a obtains the authentication token from the authentication server 1000 will be described in detail. When the user terminal 2000a receives the authentication token from the authentication server 1000 Since the process of acquiring is described in "3. Authentication Token and Update Token" described above, a detailed description will be omitted.

4.1. door  Open management method

In the conventional access management system, a server for managing access and an access control device are provided. When a user requests access, a server managing the access and an access control device are organically linked to determine whether or not access is permitted.

In this conventional system, since the access control server and the access control device must be able to communicate with each other and perform their respective roles, it is possible to determine whether or not the access is allowed, so that the server managing the access is disabled If a problem arises in communication between the server managing the access and the access control device, the user will not be able to access the server.

Hereinafter, a door opening management method according to an embodiment of the present invention will be described with reference to FIGS.

8 is an environment view of a door opening management method according to an embodiment of the present invention.

8, the door open management method according to an embodiment of the present invention is a method in which the user terminal 2000a transmits an authentication token to the door open / close device 3000, It is determined whether or not the door is opened based on the token. If it is determined that the door is open, the user of the user terminal 2000a can open and close the door 4000 by opening the door.

This authentication token causes the user terminal 2000a to obtain an authentication token by issuing an authentication token to the user terminal 2000a, as described in 3. Authentication Token and Update Token above.

In the door open management method according to an embodiment of the present invention, the authentication server 1000 requests the opening of the door using the authentication token and the door open / I can not.

Therefore, unlike the conventional access management system, the door open management method according to an embodiment of the present invention has the effect of allowing access without problems if the authentication server 1000 has a valid authentication token even if the authentication server 1000 is disabled do.

The basic concept of the door opening management method according to an embodiment of the present invention can also be applied to various embodiments to be described below.

Hereinafter, a door opening management method according to the first embodiment of the present invention will be described with reference to FIG.

FIG. 9 is a flowchart of a door open management method according to an embodiment of the present invention.

9, the door open management method includes a step S300 of transmitting the authentication token to the first door opening / closing apparatus 3000a by the user terminal 2000a, a step of determining whether the first door opening / The first door opening / closing apparatus 3000a transmits an opening determination result (S320), the first door opening / closing apparatus 3000a performs a door opening operation (S330), the user terminal 2000a A step S340 of transmitting an authentication token to the second door opening / closing device 3000b, a step S350 of determining whether the door of the second door opening / closing device 3000b is open, a step of opening the door of the second door opening / A step S360 of transmitting a determination result and a step S370 of performing a door opening operation by the second door opening / closing apparatus 3000b.

According to some embodiments of the present invention, the step of transmitting the authentication token to the first door opening / closing apparatus 3000a by the user terminal 2000a may be performed (S300).

The user terminal 2000a may transmit the stored authentication token to the first door opening / closing apparatus 3000a when the communication with the first door opening / closing apparatus 3000a is connected. For example, the user terminal 2000a may transmit the automatically stored authentication token to the first door opening / closing apparatus 3000a even if there is no separate user request.

Alternatively, the user terminal 2000a may transmit the stored authentication token to the first door opening / closing apparatus 3000a when the user's request is input. For example, the user terminal 2000a can notify that the communication with the first door opening / closing device 3000a is connected. When the communication request with the first door opening / closing device 3000a is connected, The stored authentication token can be transmitted to the first door opening / closing apparatus 3000a. Alternatively, the user terminal 2000a may transmit the stored authentication token to the first door opening / closing apparatus 3000a when communication is established with the first door opening / closing apparatus 3000a in a state in which the user's authentication token transmission request is inputted have. However, if the user terminal 2000a is not connected to the first door opening / closing apparatus 3000a within a predetermined time from the time when the authentication token transmission request is input, It is determined that the user is intending to cancel and the authentication token transmission request can be canceled. When the authentication token transmission request is canceled, the user terminal 2000a may not transmit the stored authentication token to the first door opening / closing apparatus 3000a even if the user terminal 2000a is connected to the first door opening / closing apparatus 3000a.

The transmission of the stored authentication token described above may mean at least one authentication token among the authentication tokens stored in the user terminal 2000a.

The user terminal 2000a may not transmit the authentication token to the first door opening / closing apparatus 3000a if there is no valid authentication token stored in advance.

According to some embodiments of the present invention, the step of determining whether the first door opening / closing apparatus 3000a is open may be performed (S310).

The determination as to whether or not the door is open can be determined based on the authority included in the authentication information.

The authority determination of the door opening / closing apparatus 3000 may be provided in various ways.

The first method may be a method of determining the authority when the authority includes the door identification information for the door to which the authentication token is given.

In the first method, the first door opening / closing apparatus 3000a can determine whether door identification information corresponding to the first door opening / closing apparatus 3000a is included in the authentication token. The first door opening / closing apparatus 3000a may determine that the authentication token is authorized when door identification information corresponding to the first door opening / closing apparatus 3000a is included.

The second method may be a method of determining the authority when the authentication token includes at least one of the authorized door identification information and the unauthorized door identification information and includes the authorization information therefor.

In the second method, the first door opening / closing apparatus 3000a can determine whether or not the authentication token includes the authority for the door corresponding to the first door opening / closing apparatus 3000a.

The first door opening / closing apparatus 3000a can determine whether the first door identification information corresponding to the first door opening / closing apparatus 3000a is included in the authentication token. Also, the first door opening / closing apparatus 3000a can determine whether or not the right corresponding to the first door identification information is the right to pass through the door.

Also, the first door opening / closing apparatus 3000a may determine whether the door is opened by further considering whether or not the authentication token is valid. The first door opening / closing apparatus 3000a can determine that the door open authority is not available when the valid period included in the authentication token expires.

Also, according to some embodiments of the present invention, the step of transmitting the opening determination result by the first door opening / closing apparatus 3000a may be performed (S320).

The first door opening / closing apparatus 3000a can transmit the opening determination result to the user terminal 2000a.

The first door opening / closing apparatus 3000a may transmit permission information to the user terminal 2000a indicating that it is determined that the user has authority to open the door if it is determined that the door is open. Also, the first door opening / closing apparatus 3000a may output at least one of audible and visual information through a separate output unit, thereby informing the outside that it is judged to be authorized.

Also, when the first door opening / closing apparatus 3000a determines that there is no opening authority as a result of the opening determination, the first door opening / closing apparatus 3000a may transmit a message to the user terminal 2000a indicating that door opening is impossible.

The above-described step S320 is not necessarily essential, and may be omitted according to some embodiments. Also, the execution of step S320 is not necessarily preceded by step S330, which will be described later, and may be performed during or after the execution of step S330 according to some embodiments.

Also, according to some embodiments of the present invention, the step of performing the door opening operation by the first door opening / closing apparatus 3000a may be performed (S330).

The first door opening / closing apparatus 3000a can provide power through the door power section 3600 such that the door is unlocked when it is determined that the authentication token includes authority to open the door 4000. [ Also, the first door opening / closing apparatus 3000a can provide power through the door power unit 3600 so that the door is changed to the open state when the door 4000 is an automatic door.

The first door opening / closing apparatus 3000a can provide power through the door power section 3600 so that the door is locked based on the locking condition after the door is unlocked. The first door opening / closing apparatus 3000a can judge whether or not the door has returned to the closed state based on the signal acquired from the door sensor unit 3400. If the door is returned to the closed state, So that power can be provided through the door power section 3600 as much as possible. Further, the first door opening / closing device 3000a can provide power through the door power unit 3600 so that the door is locked after the lock wait time has elapsed even if the door returns to the closed state in consideration of the lock wait time have.

Also, according to some embodiments of the present invention, the step of transmitting the authentication token to the second door opening and closing device 3000b by the user terminal 2000a may be performed (S340).

The user terminal 2000a may transmit the stored authentication token to the second door opening / closing device 3000b when communication is established with the second door opening / closing device 3000b.

According to some embodiments of the present invention, the step of determining whether the second door opening / closing apparatus 3000b is open may be performed (S350).

The second door opening / closing apparatus 3000b can determine whether or not the authentication token includes the door identification information corresponding to the second door opening / closing apparatus 3000b. The second door opening / closing apparatus 3000b can determine that the authentication token has authority to open the door 4000 if the door identification information corresponding to the second door opening / closing apparatus 3000b is included.

The second door opening / closing apparatus 3000b can determine whether or not the authentication token includes the authority to open the door 4000 corresponding to the second door opening / closing apparatus 3000b.

The second door opening / closing apparatus 3000b can determine whether or not the authentication token includes the second door identification information corresponding to the second door opening / closing apparatus 3000b. Also, the second door opening / closing device 3000b can determine whether or not the right corresponding to the second door identification information is an authority to open the door.

Also, according to some embodiments of the present invention, the step of transmitting the opening determination result by the second door opening / closing apparatus 3000b may be performed (S360).

The second door opening / closing apparatus 3000b may transmit the authorization determination result to the user terminal 2000a.

The second door opening / closing apparatus 3000b can transmit permission information to the user terminal 2000a indicating that it is determined that the user has the authority to open the door if it is determined that the user has the authority to open the door. In addition, the second door opening / closing apparatus 3000b outputs at least one of audible and visual information through a separate output unit, thereby informing the outside that it is determined that the user has an opening authority.

If it is determined that the second door opening / closing apparatus 3000b does not have the opening authority as a result of the opening determination, the second door opening / closing apparatus 3000b may transmit a message to the user terminal 2000a indicating that door opening is impossible.

Also, according to some embodiments of the present invention, the step of performing the door opening operation by the second door opening / closing apparatus 3000b may be performed (S370).

The second door opening / closing apparatus 3000b can provide power through the door power section such that the door is unlocked when it is determined that the authentication token includes authority to open the door 4000. [ Also, the second door opening / closing device 3000b can provide power through the door power unit 3600 so that the door is changed to the open state when the door 4000 is the automatic door.

The second door opening / closing apparatus 3000b can provide power through the door power section 3600 so that the door is locked based on the locking condition after the door is unlocked. The second door opening / closing apparatus 3000b can judge whether or not the door has returned to the closed state based on the signal acquired from the door sensor unit 3400. If the door is returned to the closed state, So that power can be provided through the door power section 3600 as much as possible. Further, the second door opening / closing apparatus 3000b can provide power through the door power unit 3600 so that the door is locked after the lock wait time has elapsed even if the door returns to the closed state in consideration of the lock waiting time have.

Therefore, the access request and permission according to the first embodiment of the present invention can open the authorized door 4000 using the authentication token acquired from the authentication server 1000 by the user terminal 2000a. Accordingly, the user terminal 2000a of the plurality of doors 4000 can freely access the authorized door without performing additional authentication with the authentication server 1000 when the stored authentication token is valid.

4.2. How to manage access status

Hereinafter, an access status management method according to an embodiment of the present invention will be described with reference to FIGS.

Hereinafter, the door state management method according to an exemplary embodiment of the present invention will be described or briefly described in the same manner as the door open state management method according to an embodiment of the present invention, such as opening a door .

FIG. 10 is an environment diagram of a method for managing an access state according to an embodiment of the present invention.

As shown in FIG. 10, the door first communication unit 3110 may be provided on the outer side of the door with respect to the door 4000, and the door second communication unit 3120 may be provided on the inner side of the door.

10, the door first communication unit 3110 and the door second communication unit 3120 may be connected to the door control unit 3700. [

The arrangement of the door first communication unit 3110 and the door second communication unit 3120 shown in FIG. 10 is an example for convenience of description, and is not limited thereto, and the installation position may be changed or the door first communication unit 3110 And the door second communication unit 3120 may be provided, and a further configuration such as a door third communication unit may be additionally provided.

In addition, a separate door opening / closing device 3000 may be provided on the inside and outside according to the operating environment. For example, the first door opening / closing device 3000a may be provided on the outer side and the second door opening and closing device 3000b may be provided on the inner side.

Also, one door communication unit 3100 that controls the inside and the outside according to the operating environment may be provided. In this case, the distance and direction between the door communication unit 3100 and the user terminal 2000a can be grasped, and it can be determined whether the user advances from the outside to the inside or from the inside to the outside.

Hereinafter, the access state management method of the present invention and modifications thereof will be described with reference to the installation environment of FIG. 10 for convenience of explanation.

Referring to FIG. 10, the management of whether or not a user is legitimately using the access control system in the access control system may be a very important problem.

For example, in the automated access management system, when a plurality of users want to pass through the door 4000, the user of the first user terminal 2000a 'determines the access right using the authentication token and passes through the door, The user of the second user terminal 2000a '' passes through the door 4000 opened by the user of the first user terminal 2000a 'without judging the access right so that the user of the second user terminal 2000a' A problem may arise in which the history passing through the server is not managed.

In order to prevent such a problem, the access status management method according to an embodiment of the present invention can determine whether there is an unauthorized access based on the access status information by adding the access status information. In the case of unauthorized access, . For example, if an entering user passes through a door through access authentication, the user's access state is changed from entry to entry. When such a user desires to enter again, the door opening / closing apparatus 3000 can open the door 4000 and allow the door 4000 to pass therethrough if the door 4000 is authorized because the entrance and exit state is justified.

On the other hand, if the user who has to enter is allowed to pass without access authentication, the access state of the user is maintained as entry. If such a user wishes to enter again, the door opening / closing apparatus 3000 may refuse to open the door 4000 even if the door opening / closing apparatus 3000 is authorized because the entrance state is not proper. According to some embodiments of the present invention, such a user may be separately managed by the authentication server 1000 because the user must request the authentication server 1000 to reissue access status.

Hereinafter, the access status management method and modified examples according to an embodiment of the present invention will be described in detail with reference to FIGS.

FIG. 11 is a flowchart illustrating a method of managing an entrance state according to an embodiment of the present invention.

Referring to FIG. 11, the access state management method includes transmitting an authentication token and access state information (S400), determining whether the door is open (S410), changing an access state (S420) (S430), performing a door opening operation (S440), and transmitting a reject message (S450).

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits the authentication token and the first access state information to the door first communication unit 3110 may be performed (S400).

The user terminal 2000a may transmit the stored authentication token and the first access state information to the door first communication unit 3110 when the communication with the first door communication unit 3110 is connected. The communication between the user terminal 2000a and the door first communication unit 3110 may be connected to the door open / close device 3000 through the communication between the user terminal 2000a and the door first communication unit 3110.

The user terminal 2000a may transmit the automatically stored authentication token and the first access status information to the door first communication unit 3110 even if there is no separate user request.

Or the user terminal 2000a may transmit the stored authentication token and the first access state information to the door first communication unit 3110 when the user's request is input. For example, the user terminal 2000a can notify that the communication with the door first communication unit 3110 is connected. If the authentication token transmission request of the user is input while the communication with the door first communication unit 3110 is connected, And may transmit the authentication token and the first access state information to the door first communication unit 3110. [ The user terminal 2000a may transmit the stored authentication token and the first access state information to the door first communication unit 3110 when the communication with the door first communication unit 3110 is connected in a state that a user authentication token transmission request is inputted, ). However, if the user terminal 2000a is not connected to the first communication unit 3110 within a predetermined time from the input of the authentication token transmission request, It is determined that there is an intention to cancel, and the authentication token transmission request can be canceled. When the authentication token transmission request is canceled, the user terminal 2000a may not transmit the stored authentication token to the door first communication unit 3110 even when the user terminal 2000a is connected to the door first communication unit 3110. [

The transmission of the stored authentication token described above may mean at least one authentication token among the authentication tokens stored in the user terminal 2000a.

According to some embodiments of the present invention, a step of determining whether the door is opened may be performed (S410).

The door control unit 3700 can obtain the authentication token and access state information through the door first communication unit 3110. [

The door control unit 3700 can determine whether or not the door is opened based on the authority and access state information included in the authentication token.

The door control unit 3700 can determine whether or not the authentication token includes the door identification information corresponding to the door opening / closing apparatus 3000 and / or the door 4000. [ The door control unit 3700 can determine that the authentication token is authorized when the door identification information corresponding to the door opening / closing apparatus 3000 and / or the door 4000 is included.

The door controller 3700 may determine whether or not the user has authority by considering the door identification information and the authority value.

The door control unit 3700 can determine whether or not the authentication token includes a right to the door corresponding to the door opening / closing apparatus 3000 and / or the door 4000. [

The door control unit 3700 can determine whether or not the authentication token includes the door identification information corresponding to the door opening / closing apparatus 3000 and / or the door 4000. [ Also, the door controller 3700 can determine whether the authority contained in the authority information corresponding to the door identification information is an authority to pass through the door.

The door control unit 3700 can determine whether or not access status information included in the authentication information is valid.

In one embodiment, the door control unit 3700 can determine whether or not the door state included in the door state information corresponds to the door first communication unit 3110.

The door control unit 3700 can determine that the door is opened when the authentication token is granted and the access status information included in the authentication information corresponds to the door first communication unit 3110. [ For example, when the door first communication unit 3110 is installed outside the door and the entrance / exit state information is entered, the door control unit 3700 can determine that the entrance / exit state information corresponds to the door first communication unit 3110 .

The door control unit 3700 can determine whether the door is opened based on various additional criteria other than the validity of the authorization decision and access state information based on the authentication token described above.

According to some embodiments of the present invention, the door control unit 3700 may determine whether the door is opened by further considering the number of allowed entry users in the space.

The door control unit 3700 can calculate the number of users entering the current space. The door control unit 3700 can calculate the number of users during the current entry by subtracting the number of users who entered from the entered number of users. For example, the door control unit 3700 may calculate the number of users currently entering the room by subtracting the case where the entrance / exit state is 'advancing' when the entrance / exit state is 'entering' when the door is opened.

The door control unit 3700 can determine that the door can not be opened when the number of users during the current entry is equal to or greater than a predetermined maximum entry user number.

Also, according to some embodiments of the present invention, a step of changing the access state may be performed (S420).

If it is determined that the door is opened as a result of the determination, the door control unit 3700 can change the access status information.

For example, the door control unit 3700 may include an authority to pass the door to the authentication token, and may change the access state information if the access state information is determined to be legitimate. More specifically, for example, the door control unit 3700 can change the entrance / exit state information upon entry / exit state information entry.

According to some embodiments of the present invention, the step of transmitting the changed access status information may be performed (S430).

The door control unit 3700 can control access to the user terminal 2000a so as to transmit access state information.

Also, the door control unit 3700 can control the user terminal 2000a to transmit an open determination result.

The door control unit 3700 can transmit permission information to the user terminal 2000a indicating that it is determined that the user is authorized as a result of the authorization decision. Further, the door control unit 3700 may output at least one of auditory and visual information through a separate output unit, thereby notifying the outside that it is judged to be authorized.

If it is determined that there is no authority to open the door, the door control unit 3700 may control the user terminal 2000a to transmit a message informing that the door can not be opened.

According to some embodiments of the present invention, a step of performing a door opening operation may be performed (S440).

The door control unit 3700 can control the door power unit 3600 such that the door becomes unlocked when it is determined that the authentication token includes the right to open the door.

The door power section 3600 can provide power to bring the door to the unlocked state. Also, the door control unit 3700 can control the door power unit 3600 to change the door to the open state when the door 4000 is an automatic door. In this case, the door power section 3600 can provide power to change the door to the open state.

The door control unit 3700 can control the door power unit 3600 so that the door is locked based on the locking condition after the door is unlocked. The door control unit 3700 can determine whether or not the door has returned to the closed state based on the signal acquired from the door sensor unit 3400. When the door is returned to the closed state, Section 3600 to provide power. Also, the door control unit 3700 can control the door power unit 3600 so that the door is locked after the lock wait time elapses even if the door returns to the closed state in consideration of the lock wait time.

In addition, according to some embodiments of the present invention, when the door is determined to be open, the rejection message may be transmitted (S450).

The door control unit 3700 can control the user terminal 2000a to transmit an open rejection message when it is determined that the door is open.

The open reject message may be a message informing that the door can not be opened.

The open reject message may further include the open reject reason. For example, the open rejection message may include open rejection reasons such as no authorization, an authentication token is invalid, an authentication token has expired, an entry state is not valid, and a maximum number of users has been exceeded.

In the access state management method according to an embodiment of the present invention as described above, the pre-change access state information is provided to the door opening / closing device to determine whether or not the door is opened. As a result, In the case where the entrance state information changed again without passing through the door is transmitted to the same first door communication unit 3110, the door control unit 3700 rejects the door opening unlike the case where the door opening is granted based on the pre- .

In the above description, the authentication token is transmitted through the first door communication unit 3110 assuming the entrance state for convenience of explanation. However, the authentication token may be transmitted in various ways depending on the installation environment. For example, in the entry state, the access state management method may be performed by transmitting the authentication token through the second door communication unit 3120. [

The access state management method according to an embodiment of the present invention described above can be variously modified.

Modifications of the access state management method will now be described with reference to FIGS. 12 to 17. FIG.

In the following description of the modification of the access state management method, the same reference numerals are used for the same constituent elements and steps as those of the access state management method described above, and the same steps as the access state management method described above in each step are described Omit it.

4.2.1. Access status management method - 1st Variation example

12 is a flowchart showing a first modification of the access status management method according to an embodiment of the present invention.

Referring to FIG. 12, a first modification of the access state management method includes a step S400 of transmitting an authentication token, a step S410 of determining whether the door is open, a step S500 of transmitting information on the opening determination result, A step S520 of changing the access state information by the authentication server 1000 and a step S530 of transmitting the updated access state information in operation S410. Can be performed.

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits an authentication token to the door first communication unit 3110 may be performed (S400).

According to some embodiments of the present invention, the step of determining whether the door is open or not may be performed by the door control unit 3700 (S410).

In addition, according to some embodiments of the present invention, the step of controlling the door control unit 3700 to transmit the open determination result information may be performed (S500).

The door control unit 3700 can control to transmit, to the user terminal 2000a, information indicating that the authentication is permitted and that the opening is permitted when the access state is judged to be legitimate.

Or the door control unit 3700 can control to transmit to the user terminal 2000a information indicating that the authorization is not included in the authentication token or that the opening is rejected when it is determined that the access state is not legitimate.

Also, the door control unit 3700 can control the access state information to be transmitted to the user terminal 2000a.

Also, the door control unit 3700 can control to transmit the authentication token to the user terminal 2000a.

According to some embodiments of the present invention, a step of performing a door opening operation may be performed (S440).

Also, according to some embodiments of the present invention, the step of requesting the user terminal 2000a to update the access status information to the authentication server 1000 may be performed (S510).

The user terminal 2000a may request the authentication server 1000 to update the access status information when receiving information indicating that the door is permitted to be opened from the door open /

The user terminal 2000a can request the authentication server 1000 to update the access status information by transmitting the identification information of the opened door, the information indicating that the door is opened, and the access status information to the authentication server 1000. [

According to some embodiments of the present invention, the step of changing the access state of the access state information received by the authentication server 1000 may be performed (S520).

The authentication server 1000 can update the access state included in the received access state information.

To the user terminal 2000a. For example, when the access state is the entry state, the authentication server 1000 can update the access state to advance. As another example, if the access state is advanced, the authentication server 1000 can update the access state to the entry state.

According to some embodiments of the present invention, the step of transmitting the updated access state information to the user terminal 2000a by the authentication server 1000 may be performed (S530).

In the first modification of the entrance state management method described above, various additional functions may be added depending on the situation. The first modification of the entrance state management method can determine whether or not the user has entered a specific space based on the identification information of the door which is acquired from the user terminal 2000a and is allowed to open.

According to some embodiments of the present invention, upon occurrence of an emergency such as a fire, the authentication server 1000 can determine whether or not all users are evacuated to the site. The authentication server 1000 can judge whether or not the user has entered the predetermined settlement place based on the identification information of the door which is obtained from the user terminal 2000a and which is allowed to be opened.

Also, the authentication server 1000 may transmit the evacuation notification to the user terminal 2000a of the user who has not entered the predetermined collection site among the registered users or the users who have issued the authentication token. Also, the authentication server 1000 can transmit information for guiding the location of the predetermined collection point to the user terminal 2000a of the user who has not entered the predetermined collection site among the registered users or users who have issued the authentication token.

4.2.2. Access Control Method - 2nd Variation example

13 is a flowchart showing a second modification of the access status management method according to the embodiment of the present invention.

Referring to FIG. 13, a second modification of the access state management method includes transmitting an authentication token (S400), determining whether the door is open (S410), transmitting the opening determination result information (S500) (S510), the authentication server 1000 performs the change of the time stamp recording and access state information (S520), the updated access state information (S530), the time stamp (S540), checking the time stamp (S550), and performing door opening (S440) may be performed.

According to some embodiments of the present invention, a step of transmitting an authentication token may be performed (S400).

According to some embodiments of the present invention, a step of determining whether the door is open may be performed (S410).

According to some embodiments of the present invention, the step of transmitting information on the result of the open determination may be performed (S500).

According to some embodiments of the present invention, the step of requesting the update of access status information may be performed (S510).

According to some embodiments of the present invention, the step of the authentication server 1000 performing the change of the time stamp recording and access state information may be performed (S520).

The authentication server 1000 may record a time stamp on at least one of the authentication token and access state information.

The authentication server 1000 may record the time stamp based on at least one of the time at which the information indicating that the door is opened is permitted, the time at which the access status information is requested to be updated, and the current time.

According to some embodiments of the present invention, the step of transmitting the updated access status information may be performed (S530).

The authentication server 1000 can transmit updated access state information to the user terminal 2000a. Also, the authentication server 1000 may transmit the authentication token to the user terminal 2000a when the authentication token is obtained from the user terminal 2000a. Also, the authentication server 1000 may transmit the updated authentication token in which the time stamp is recorded to the user terminal 2000a when the time stamp is recorded in the authentication token.

Also, the authentication server 1000 can independently transmit access state information and time stamp.

According to some embodiments of the present invention, a step of transmitting a time stamp may be performed (S540).

The user terminal 2000a may transmit the time stamp to the door opening / closing apparatus 3000. [ For example, as shown in FIG. 13, the user terminal 2000a may transmit a time stamp to the door first communication unit 3110. FIG.

The user terminal 2000a can transmit the independently provided time stamp to the door opening / closing apparatus 3000. [

Or the user terminal 2000a may transmit the time stamp to the door opening / closing apparatus 3000 by transmitting the access state information to the door opening / closing apparatus 3000 when the time stamp is included in the access state information.

Or the user terminal 2000a may transmit the time stamp to the door opening / closing apparatus 3000 by transmitting the authentication token to the door opening / closing apparatus 3000 when the time stamp is included in the authentication token.

According to some embodiments of the present invention, a step of checking the time stamp may be performed (S550).

The door control unit 3700 can check the time stamp.

The door control unit 3700 can check whether the time stamp is obtained from the user terminal 2000a. For example, the door control unit 3700 can check whether or not an independent time stamp is obtained from the user terminal 2000a. For example, the door control unit 3700 may check whether the time stamp is included in at least one of the authentication token and access state information acquired from the user terminal 2000a.

The door control unit 3700 can check whether or not the time stamp time is valid.

For example, the door control unit 3700 can check whether or not the time of the time stamp is the time after transmitting the opening determination result or the time after transmitting the opening determination result. The door control unit 3700 can determine that the time stamp is valid when the time stamp time is the time after transmitting the opening determination result or the time after transmitting the opening determination result.

The door control unit 3700 can control the door to be opened when there is no abnormality in the time stamp check result.

According to some embodiments of the present invention, a step of performing door opening may be performed (S440).

The timestamps described above can be modified into various forms. For example, the time stamp may be provided by a certificate, a digital signature, a security key, or the like.

4.2.3. How to manage access status - 3rd Variation example

14 is a flowchart showing a third modification of the access status management method according to the embodiment of the present invention.

Referring to FIG. 14, a third modification of the access status management method includes a step S400 of transmitting an authentication token, a step S410 of determining whether the door is opened, a step S410 of transmitting the opening determination result (S500), performing a door opening operation (S440), and changing the access state information (S600) by the user terminal (2000a).

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits an authentication token to the door first communication unit 3110 may be performed (S400).

According to some embodiments of the present invention, a step of determining whether the door is opened may be performed (S410).

Also, according to some embodiments of the present invention, a step of transmitting an open determination result may be performed (S500).

The door control unit 3700 can control to transmit to the user terminal 2000a information indicating that the door is allowed to be opened.

Or the door control unit 3700 may control to transmit to the user terminal 2000a information indicating that the door has been opened.

Also, the door control unit 3700 can control the access state information to be transmitted to the user terminal 2000a.

According to some embodiments of the present invention, a step of performing a door opening operation may be performed (S440).

According to some embodiments of the present invention, the step of updating the access state of the user terminal 2000a may be performed (S600).

The user terminal 2000a can receive access state information and update the received access state information.

The user terminal 2000a can update and store the received access state information. For example, when the access state is the entry state, the user terminal 2000a can update the access state to advance and store it. As another example, when the access state is advanced, the user terminal 2000a may update the access state to the entry state and store the state.

4.2.4. Access status management method - 4th Variation example

Hereinafter, a fourth modification of the access status management method according to an embodiment of the present invention will be described with reference to FIG.

The fourth modification of the access status management method according to the embodiment of the present invention may be an embodiment of requesting the authentication server 1000 to reissue the access status information when the access status information is not valid and the development of the door is rejected .

15 is a flowchart showing a fourth modification of the access status management method according to the embodiment of the present invention.

Referring to FIG. 15, a fourth modification of the access status management method includes transmitting an authentication token (S400), determining whether the door is open (S410), transmitting an open rejection message (S450) (S710) for transmitting the authentication information and the access status information to the authentication server (1000) and requesting the access status information update (S710) and the authentication server (1000) regenerating the access status information (S710) (S720) of re-issuing access status information to the user terminal 2000a.

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits the authentication token to the door first communication unit may be performed (S400).

Also, according to some embodiments of the present invention, a step of determining whether the door opening / closing apparatus 3000 is open may be performed (S410).

Also, according to some embodiments of the present invention, the step of transmitting the open rejection message by the door opening / closing apparatus 3000 may be performed (S450).

The door control unit 3700 determines that the access state is not valid when the entrance state information does not correspond to the door first communication unit 3110 and can transmit an open refusal message to the user terminal 2000a.

Also, according to some embodiments of the present invention, the user terminal 2000a may transmit the authentication information and the access status information to the authentication server 1000 and request re-issuance of the access status information (S700).

The user terminal 2000a can transmit authentication information and access status information to the authentication server 1000. [ The authentication information may include at least one of user information, user identification information, a security key, and an authentication token.

Also, the user terminal 2000a does not necessarily have to send the authentication information and access state information to the authentication server to request the re-issuance of the access state information. The user terminal 2000a transmits at least one of authentication information and access state information to request re- .

Also, when access status information is included in the authentication token, access status information transmission of the user terminal 2000a to the authentication server 1000 may mean transmitting the authentication token to the authentication server 1000. [

Also, when the access state information is implemented separately from the authentication token, access state information transmission to the authentication server 1000 of the user terminal 2000a may mean transmission of access state information only.

Also, according to some embodiments of the present invention, the step of regenerating access state information by the authentication server 1000 may be performed (S710).

The authentication server 1000 can change the access status information after performing authentication based on the acquired authentication information.

The authentication server 1000 can regenerate access status information by changing the access status information if it is determined that the user is a legitimate user as a result of user authentication. For example, the authentication server 1000 can change the access state to advance when the access state of the received state information is the entry state.

Also, the authentication server 1000 can change the access state to the state requested by the user terminal 2000a. For example, when the user terminal 2000a is requested to change the access state to the entry state, the authentication server 1000 may change the access state of the state information to the entry state.

According to some embodiments of the present invention, the step of re-issuing access state information to the user terminal 2000a by the authentication server 1000 may be performed (S720).

The authentication server 1000 can transmit the regenerated access status information to the user terminal 2000a and reissue it. Also, the authentication server 1000 can store the change history.

4.2.5. How to manage access status - 5th Variation example

Hereinafter, a fifth modification of the access status management method according to an embodiment of the present invention will be described with reference to FIG.

The fifth modification of the access status management method according to an embodiment of the present invention may be an embodiment for managing whether or not the user has actually passed.

For example, when the entering user transmits the authentication token to the door first communication unit 3110 installed outside and enters the inside of the door after the door is opened, the entrance state information of the access state changed from the door second communication unit 3120 installed inside Only the user who has passed through the actual door can acquire the entrance / exit state information in which the entrance / exit state has been changed.

16 is a flowchart showing a fifth modification of the access status management method according to the embodiment of the present invention.

Referring to FIG. 16, the fifth modification of the access state management method includes a step S400 of transmitting an authentication token, a step S410 of determining whether the door is opened, a step S420 of changing the access state, (S440), and the door second communication unit 3120 transmits the access state information (S800).

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits an authentication token to the door first communication unit 3110 may be performed (S400).

According to some embodiments of the present invention, the step of determining whether the door is open or not may be performed by the door control unit 3700 (S410).

Also, according to some embodiments of the present invention, a step of changing the access state may be performed (S420).

According to some embodiments of the present invention, a step of performing a door opening operation may be performed (S440).

In addition, according to some embodiments of the present invention, the step of transmitting / receiving state information may be performed by the door second communication unit 3120 (S440).

The door control unit 3700 can control the door second communication unit 3120 to transmit access state information to the user terminal 2000a.

The door control unit 3700 can control the door second communication unit 3120 to transmit the access status information to the user terminal 2000a when the second door communication unit 3120 is connected to the user terminal 2000a.

The door control unit 3700 communicates with the user terminal 2000a within a predetermined time from at least one of an authentication token reception time point, a door opening determination time point, an entrance state change time point, and a door opening time point The transmission of the access status information can be canceled.

4.2.6. Access status management method - 6th Variation example

Hereinafter, a sixth modification of the access status management method according to an embodiment of the present invention will be described with reference to FIGS. 17 and 18. FIG.

The sixth modification may be an embodiment for the case where the door is provided in a hierarchical structure.

17 is an environmental view of a door of a measuring structure according to a sixth modification of the present invention.

As shown in FIG. 17, the space separated by one door may include a separate internal space. 13, the first door opening / closing apparatus 3000a may be provided on the first door 4000a for separating the external space from the first internal space, and the second door opening / closing apparatus 3000b may be provided on the first door opening / And the second door 4000b for separating the two internal spaces.

Therefore, it is preferable that the internal space and the state information of the upper space are managed separately from each other.

Hereinafter, a sixth modification of the access status management method will be described with reference to FIG.

18 is a flowchart showing a sixth modification of the access status management method according to the embodiment of the present invention.

Referring to FIG. 18, a sixth modification of the access state management method includes a step S900 in which the user terminal 2000a transmits an authentication token to the first door opening / closing apparatus 3000a, (S910), the first door opening / closing apparatus 3000a changes the entrance / exit state information (S920), the first door opening / closing apparatus 3000a transmits the entrance / exit state information (S930) The first door opening / closing apparatus 3000a may be configured to open the first door 4000a and to transmit the authentication token to the second door opening and closing apparatus 3000b (S940) (S950), the second door open / close device 3000b changes the entrance / exit state information (S960), the second door open / close device 3000b transmits the entrance / exit state information (S970 And opening the second door 4000b (S440).

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits the authentication token to the first door opening / closing apparatus 3000a may be performed (S900).

According to some embodiments of the present invention, the step of determining whether the first door opening / closing apparatus 3000a is open may be performed (S910).

The first door opening / closing apparatus 3000a can determine whether or not the door is opened based on the authority and access state information included in the authentication token.

The first door opening / closing apparatus 3000a can determine whether or not the authentication token includes the door identification information corresponding to the first door opening / closing apparatus 3000a. The first door opening / closing apparatus 3000a may determine that the authentication token is authorized when door identification information corresponding to the first door opening / closing apparatus 3000a is included.

The first door opening / closing apparatus 3000a can determine whether or not the authorization token corresponding to the door corresponding to the first door opening / closing apparatus 3000a is included in the authentication token.

The first door opening / closing apparatus 3000a can determine whether or not the authentication token includes the door identification information corresponding to the first door opening / closing apparatus 3000a. Also, the first door opening / closing apparatus 3000a can determine whether the right value corresponding to the door identification information is a right value for passing through the door.

The first door opening / closing apparatus 3000a can determine whether or not access state information included in the authentication information is valid.

The first door opening / closing apparatus 3000a can determine whether or not the access state of the first door opening / closing apparatus 3000a included in the access state information corresponds to the door communication unit 3100 that has obtained the authentication token. Hereinafter, it will be assumed that an authentication token is obtained through the door first communication unit 3110 of the first door opening / closing apparatus 3000a. The first door opening / closing apparatus 3000a can determine whether or not the door state corresponds to the door first communication unit 3110 of the first door opening / closing apparatus 3000a.

The first door opening / closing apparatus 3000a has a function of granting authorization to the authentication token, and at the same time, the entrance state of the first door opening / closing apparatus 3000a included in the authentication information to the first door communication unit 3110 of the first door opening / It is possible to determine that the door is opened.

In addition, according to some embodiments of the present invention, the step of changing the access state information of the first door opening / closing apparatus 3000a may be performed (S920).

The first door opening / closing apparatus 3000a can change the entry / exit state to the next step. For example, the first door opening / closing apparatus 3000a can change the entry / exit state by advancing when the entry / exit state is entered.

In addition, according to some embodiments of the present invention, the step of transmitting / receiving state information of the first door opening / closing apparatus 3000a may be performed (S930).

The first door opening / closing apparatus 3000 can transmit to the user terminal 2000a the entrance / exit state information of the entrance / exit state of the first door opening / closing apparatus 3000.

The user terminal 2000a can update the access state of the authentication token with access state information acquired from the first door opening / closing apparatus 3000a. Or the user terminal 2000a may discard the previously stored access state information and store the access state information acquired from the first door opening / closing apparatus 3000. [

Also, according to some embodiments of the present invention, the step of performing the opening operation of the first door opening / closing apparatus 3000a with respect to the first door 4000a may be performed (S440).

Also, according to some embodiments of the present invention, the step of transmitting the authentication token to the second door opening / closing apparatus 3000 by the user terminal 2000a may be performed (S940).

According to some embodiments of the present invention, the step of determining whether the second door opening / closing apparatus 3000 is open may be performed (S950).

The second door opening / closing apparatus 3000b can determine whether or not the door is opened based on the authority and access state information included in the authentication token.

The second door opening / closing apparatus 3000b can determine whether or not the authentication token includes the door identification information corresponding to the second door opening / closing apparatus 3000b. The second door opening / closing apparatus 3000b may determine that the authorization token includes the door identification information corresponding to the second door opening and closing apparatus 3000b.

The second door opening / closing apparatus 3000b can determine whether or not the authorization token corresponding to the door corresponding to the second door opening / closing apparatus 3000b is included in the authentication token.

The second door opening / closing apparatus 3000b can determine whether or not the authentication token includes the door identification information corresponding to the second door opening / closing apparatus 3000b. Also, the second door opening / closing apparatus 3000b can determine whether the right value corresponding to the door identification information is a right value for passing through the door.

The second door opening / closing apparatus 3000b can determine whether or not access state information included in the authentication information is valid.

The second door opening / closing apparatus 3000b can determine whether or not the access state of the second door opening / closing apparatus 3000b included in the entry state information corresponds to the door communication section 3100 that has obtained the authentication token. Hereinafter, it will be assumed that an authentication token is obtained through the door first communication unit 3110 of the second door opening / closing apparatus 3000b. The second door opening / closing apparatus 3000b can determine whether or not the door state corresponds to the door first communication unit of the second door opening / closing apparatus 3000b.

The second door opening / closing apparatus 3000b is configured to allow the authentication token to be granted and the access state of the second door opening / closing apparatus 3000b included in the authentication information to the door first communication unit of the first door opening and closing apparatus 3000a The door can be determined to be opened.

Also, the second door opening / closing apparatus 3000b can determine whether or not the door is opened by further taking into account the entrance / exit state of the upper door opening / closing apparatus 3000a.

The second door opening / closing apparatus 3000b can reject the door opening when the entrance / exit state to the first door opening / closing apparatus 3000a is abnormal. If the entrance / exit state to the first door opening / closing apparatus 3000a is abnormal, it may be determined that the door opening / closing apparatus 3000a does not pass through the first door opening / closing apparatus 3000a. For example, if the first door opening / closing apparatus 3000a passes through the first door opening / closing apparatus 3000a, the first door opening / closing apparatus 3000a should be in the advanced state. If the first door opening / , The second door opening / closing apparatus 3000b may determine that the first door opening / closing apparatus 3000a has abnormally passed, and may refuse to open the door.

In addition, according to some embodiments of the present invention, the step of changing the access state information of the second door opening / closing apparatus 3000b may be performed (S960).

The second door opening / closing apparatus 3000b can change access state information when it is determined that the door is opened.

The second door opening / closing apparatus 3000b can change the entry / exit state to the next step. For example, the second door opening / closing apparatus 3000b can change the entrance / exit state by advancing to / from the second door opening / closing apparatus 3000b.

Also, according to some embodiments of the present invention, the step of transmitting / receiving state information of the second door opening / closing apparatus 3000b may be performed (S970).

Also, according to some embodiments of the present invention, the step of performing the opening operation of the second door opening / closing apparatus 3000a to the second door 4000b may be performed (S440).

Although the access management through the hierarchical structure between the plurality of the door opening / closing apparatuses 3000a has been described above, the present invention is not limited to this, and the sixth modification of the access state management method according to the embodiment of the present invention is not limited to the door opening / May be provided as a metrological structure of the device 3000 and the electromagnetic period. For example, when requesting use of an electronic device by using an authentication token, the electronic device can determine whether or not the electronic device has entered through the entrance door of the space where the electronic device is located based on the access state information, It is possible to allow the use of the electronic device when entering through the door of the space where the door is located. In this embodiment, the second door opening / closing device 3000b is replaced with an electronic device in the sixth modification of the entrance state management method according to the embodiment of the present invention, and the second door opening / closing device 3000b is provided It can be said that the judgment of whether or not the door is opened can be replaced by judging whether or not the electronic device is allowed to use the door.

4.3. How to force change permissions

Hereinafter, a method of forcibly changing an authority according to an embodiment of the present invention will be described with reference to FIGS.

FIG. 19 is an environment diagram of a method of forcibly changing an authority according to an embodiment of the present invention.

When the access management system 10000 of the present invention is provided in a building or the like, an authentication token may be issued according to the authority granted at a normal time, so that only the authorized door can be opened, thereby limiting the accessable area. However, in the event of a special event such as fire or earthquake, it is desirable to allow all doors to be opened exclusively or to allow the door to be opened for evacuation. The conventional access management system may fail to open the door for evacuation in the event of a failure in the communication connection between the server managing the access in case of fire or earthquake and the access control device. However, in the access management system 10000 of the present invention, the authentication server 1000 can forcibly solve such a problem by issuing an authorized authentication token.

In addition, the method of forcible change according to an embodiment of the present invention can be applied to a case where access to an authorized user is temporarily restricted due to a security conference or the like.

20 is a flowchart illustrating a method of forcibly changing an authority according to an embodiment of the present invention.

Referring to FIG. 20, the method of forcibly changing an authority includes a step of acquiring a request for permission change (S1000), a step of extracting an object to be changed (S1010), a step of transmitting an authentication token whose authority is updated to the extracted object S1020).

According to some embodiments of the present invention, a step of obtaining a request for a change of authority may be performed (S1000). The request for the change of authority may be provided by the user terminal 2000a.

The user terminal 2000a may obtain the authority change request information.

The permission change request information may be information requesting that the user's permission be changed. The change of authority according to the change permission request information may mean a change of permission continuously, but is not limited to this, and at least one of the time limit and the condition may mean a predetermined change.

Also, the object of the authority change may be at least one of the user and the door (4000). If the target of the permission change is the user, it may be to change the privilege granted to the selected user. Also, if the target of the authority change is a door, it may be to change the authority through update of the authentication token including the authority for the door.

The user terminal 2000a may output the rights change GUI for obtaining the rights change request information through the display unit.

The user terminal 2000a can acquire information on the object of change. If the object of change is a user, information on the object of change can be obtained through at least one of a method of selecting a user to change the authority and inputting user identification information. Also, if the object of change is a door, information on the object of change can be obtained through at least one of a method for selecting a door to be changed and a method for inputting door identification information.

The user terminal 2000a can obtain information on the change history.

If the object of change is the user, the change history of at least a part of the rights previously granted to the user can be obtained. For example, if the user is authorized for the first door, the change history may include releasing the authority for the first door. As another example, if the user does not have authority to the first door, the change history may include contents granting authority to the first door. In another example, the change history may include content that grants authority to the first door only to a specific user.

As such, the change history may include changes to at least some of the previously granted or unauthorized rights.

And whether the access to the door to be changed is forcibly restricted or permitted when the object of change is a door. For example, if the object of change is a door, the change history may include information requesting to restrict authority to the door to be changed. As another example, the change history may include information requesting to forcibly allow the authority to the change target door.

Also, according to some embodiments of the present invention, the change history may be the occurrence of a predetermined specific event. For example, the change history may be a fire event.

In this case, the change history may be open to all doors.

The user terminal 2000a can obtain information on the change condition.

The change condition may be a condition in which the change is valid.

The change condition may include the change time and the target class.

The change time may be information on the time when the change of authority is valid. For example, the changed authority can only be valid for a limited period of time depending on the modification time. For another example, the changed authority may be limited, depending on the target class.

The user terminal 2000a may transmit the permission change request information to the authentication server 1000 to request permission change.

Also, according to some embodiments of the present invention, the change condition may be omitted if the change history is the occurrence of a specific event such as a fire.

In addition, according to some embodiments of the present invention, a step of extracting a target to change the authority may be performed (S1010).

The authentication server 1000 can extract the object included in the permission change request information.

The case where the target included in the permission change request information is a user is exemplarily described. The authentication server 1000 can extract a user to change the authority. The authentication server 1000 can extract the user identification information included in the change object as a user to change the authority. In addition, the authentication server 1000 can extract the user of the class included in the change target as the permission change object.

The case where the target included in the permission change request information is a door is exemplarily described. In the case where the permission target is the door, the change details may be performed in a different operation when the door is blocked or the door is permitted. have.

If the change history is block to the door, the authentication server 1000 can extract the user who has been granted the authority for the door as a change of authority.

Also, if the change history is permit for the door, the authentication server 1000 can extract a user who has not been granted the right to the door as a change of authority.

According to some embodiments of the present invention, when the change history is the occurrence of a specific event such as a fire, the rights change object may be all registered users or all users who have issued an authentication token.

According to some embodiments of the present invention, a step of transmitting an authorization token whose authorization has been renewed to the extracted object may be performed (S 1020).

The authentication server 1000 can transmit an authentication token whose authority is changed based on the authority change history for each extracted user. For example, in a state where an authentication token to which an authority for a first door has been issued is issued to a target A included in the permission change request information, if the authorization change request requests that the authority for the first door be released, The server 1000 may transmit a new authentication token that does not include the authority for the first door to the user terminal 2000a of the A user. Also, the user terminal 2000a of the user A can discard the existing authentication token after receiving the new authentication token and update the authentication token with the newly received authentication token.

The authentication server 1000 can return to the original authentication token when the time limit and / or the condition for changing the authority are released.

For example, the authentication server 1000 may transmit the authentication token before the authorization change to the user terminal 2000a to update the authentication token.

As another example, the authentication server 1000 may send an instruction to the user terminal 2000a to use an authentication token before the authorization change.

The request for changing the authority is not necessarily obtained through the user terminal 2000a but can be obtained from the administrator terminal 2000b.

In addition, the authority change request information can be acquired in connection with a separate system such as a fire alarm system and a disaster management system.

In addition, when it is judged that a special event such as a fire occurrence or a disaster occurs in connection with a separate system such as a fire alarm system and a disaster management system, it is determined that a request for permission change has been obtained, Authentication information can be transmitted.

If it is determined that such a special event has occurred, an object to which the updated authentication information is to be transmitted may be preset in the authentication server 1000.

Also, in a situation where a special event occurs, the door opening / closing apparatus 3000 can acquire a notification from the terminal 2000 that a special event has occurred, and judges whether or not a special event has occurred based on the information included in the authentication token can do.

According to some embodiments of the present invention, when it is determined that a special event has occurred, the door open / close device 3000 can notify all the connected door open / close devices 3000 that a special event has occurred, The opening / closing apparatus 3000 can change the state of the door to a normally open state.

In a situation where it is determined that a special event has occurred and in a general situation, the door opening / closing apparatus 3000 can operate in different modes.

FIG. 21 is an exemplary view showing an operation of the door opening / closing apparatus 3000 according to an embodiment of the present invention in a general situation and a special event occurrence situation.

As shown in FIG. 21, the door opening / closing apparatus 3000 can judge only a signal obtained in the first communication range as a legitimate signal in a general situation. Specifically, the door control unit 3700 can acquire a signal transmitted by the terminal 2000 through the door communication unit 3100. Also, the door control unit 3700 can determine that the signal obtained through the door communication unit 3100 is a valid signal when the signal is within the first communication range. The door control unit 3700 can determine whether the acquired signal is within the first communication range based on the signal strength. The door control unit 3700 can ignore the signal obtained when the signal obtained through the door communication unit 3100 is acquired in the second communication range outside the first communication range.

In a situation where a special event occurs, the door control unit 3700 can determine that the acquired signal is a legitimate signal even if the signal is acquired in the second communication range.

The terminal 2000 may transmit an event notification including a notification of occurrence of a special event to a signal when a signal is generated.

Even if the door control unit 3700 acquires the signal in the second communication range, it can judge the acquired signal as a legitimate signal without ignoring the acquired signal when an event occurrence notification indicating that a special event has occurred is included.

Also, the door control unit 3700 can perform a predetermined special event operation when an event occurrence notification indicating that a special event has occurred in the acquired signal is included. For example, the door control unit 3700 can perform a special event operation to open the door at all times. For example, the door control unit 3700 may perform a special event operation to open the door irrespective of the conditions such as authorization or the like.

Also according to some embodiments of the present invention, the authentication server 1000 may issue an authentication token that can register a particular user to the door open / close device 3000 to allow the terminal 2000 to enter only a specific user . The terminal 2000 may transmit an authentication token to the specific user to the door open / close device 3000, and the door open / close device 3000 may be authorized to open the door only to the specific user included in the authentication token It can be judged.

4.4. Local Area Security Method

Hereinafter, a local area security method according to an embodiment of the present invention will be described with reference to FIGS.

22 is an environment diagram of a local security method according to an embodiment of the present invention.

Referring to FIG. 22, in the area-based security method according to an embodiment of the present invention, when using an electronic device such as office electronic device 6000 and a hotel electronic device provided at a place where an accessing user enters and exits, And whether the user is allowed to enter or leave the room.

Electronic appliances such as the office electronic equipment 6000 provided in the office and the lighting and the air conditioner provided in the hotel rooms need to be limited to use by only a predetermined user.

However, if the PC password is lost or the hotel room key is lost, a problem may arise where any user unauthorizedly uses the office electronic device or the hotel electronic device.

Accordingly, the local security method according to an exemplary embodiment of the present invention permits the use of the electronic device only when the authentication server 1000 judges whether or not the user has actually entered the space where the electronic device is located, The security can be enhanced.

23 is a flowchart illustrating a local security method according to an exemplary embodiment of the present invention.

23, the area-based security method includes a step S1100 in which the user terminal 2000a transmits the entry history information to the authentication server 1000, a step S1100 in which the user terminal 2000a requests the use of the office electronic device 6000 A step S1120 in which the office electronic device 6000 requests user authentication to the authentication server 1000 and a step S1130 in which the authentication server 1000 performs user authentication, A step S1140 of transmitting the authentication result to the office electronic apparatus 6000, a step S1150 of allowing the office electronic apparatus 6000 to use the system, a step S1160 of transmitting the advancement history information of the user terminal 2000a, The authentication server 1000 may transmit the termination command to the office electronic device 6000 (S1170).

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits the entry history information to the authentication server 1000 may be performed (S1100). Here, the authentication server 1000 may be the authentication server 1000 that issued the authentication token, or may be a separate authentication-based server other than the authentication server that issued the authentication token 1000.

When the user terminal 2000a receives permission information indicating that the user terminal 2000a is authorized, the user terminal 2000a can transmit information to the authentication server 1000 and door identification information on the authorized door.

The authentication server 1000 can obtain permission information and door identification information from the user terminal 2000a and store the same.

The authentication server 1000 can determine the space in which the user has entered based on the permission information and the door identification information.

According to some embodiments of the present invention, the step of requesting the use of the user terminal 2000a by the office electronic device 6000 may be performed (S1110).

The user terminal 2000a may transmit the authentication token to the office electronic device 6000 and request the use thereof. To this end, the office electronic apparatus 6000 may be provided with communication means capable of communicating with the user terminal 2000a.

Or the office electronic device 6000 can obtain an input for a use request from a user without the user terminal 2000a through the user terminal 2000a. To this end, the office electronic apparatus 6000 may include input means for acquiring a user's input.

When the office electronic device 6000 acquires the use request through the input of the user, the office electronic device 6000 receives at least one of the user's information, the user identification information, and the security keys corresponding to the user identification information through the input of the user Can be obtained.

Also, according to some embodiments of the present invention, the step of requesting the office electronic device 6000 to authenticate the user with the authentication server 1000 may be performed (S1120).

The office electronic device 6000 can transmit the obtained authentication token to the authentication server 1000 to request the user authentication.

The office electronic device 6000 can determine whether or not the authority to the office electronic device 6000 is included in the acquired authentication token and if the authority to the office electronic device 6000 is included as a result of the determination, Token may be transmitted to the authentication server 1000 to request user authentication. In addition, the office electronic apparatus 6000 can output a rejection message rejecting the use when the authority to the office electronic apparatus 6000 is not included as a result of the determination.

In addition, the office electronic device 6000 may transmit at least one of the acquired user information, user identification information, and the security key corresponding to the user identification information to the authentication server 1000 to request user authentication.

Also, according to some embodiments of the present invention, the step of performing authentication of the authentication server 1000 by the user may be performed (S1130).

The authentication server 1000 can determine whether the user's door corresponding to the authentication token acquired from the office electronic device 6000 has passed or not. The authentication server 1000 determines whether or not the user of the authentication token has entered through the door 4000 corresponding to the space in which the office electronic apparatus 6000 is located based on at least one of the stored permission information, the door identification information, It can be judged.

Also, the authentication server 1000 can determine the authority corresponding to the user identification information acquired from the office electronic apparatus 6000. [

According to some embodiments of the present invention, the authentication server 1000 may transmit the authentication result to the office electronic device 6000 (S1140).

The authentication server 1000 may request the office electronic device 6000 to permit the use of the authentication token if the user of the authentication token is determined to have entered through the door corresponding to the space in which the office electronic apparatus 6000 is located.

The authentication server 1000 may transmit the authorization information corresponding to the user identification information to the office electronic device 6000 to request permission to use the function included in the authorization information.

The authentication server 1000 may request the office electronic device 6000 to allow the user corresponding to the user identification information to use the door when it is determined that the user has entered through the door corresponding to the space in which the office electronic device 6000 is located have.

According to some embodiments of the present invention, the step of allowing the office electronic device 6000 to permit use based on the authentication result may be performed (S1150).

The office electronic apparatus 6000 can permit the use of the office electronic apparatus 6000 when the user authentication result is permitted.

Also, according to some embodiments of the present invention, the step of transmitting the advancement history information by the user terminal 2000a may be performed (S1160).

The authentication server 1000 can acquire information from the user terminal 2000a to inform that the office electronic device 6000 has passed through the door in order to enter the space where the office electronic device 6000 is located.

Also, according to some embodiments of the present invention, the step of transmitting the termination command to the office electronic apparatus 6000 by the authentication server 1000 may be performed (S1170).

When the authentication server 1000 acquires information from the user terminal 2000a indicating that the door has passed through the door to move the door to the space where the office electronic apparatus 6000 is located, the authentication server 1000 may request the office electronic apparatus 6000 to terminate the door . The shutdown of the office electronic device 6000 may be at least one of power off, screen saver operation and logoff.

4.4.1. Local Area Security Method - 1st Variation example

The area-based security described above can be variously modified depending on the use.

In a first modification of the area-based security, the authentication server 1000 may acquire information on the door entry from the user terminal 2000a and transmit a control command to the external controller based on the acquired door entry information .

Hereinafter, the operation in the hotel room will be described as an example for convenience of explanation. Conventionally, a physical key is used to control access to a hotel room and the function of a room in a hotel room. However, when such a physical key is used, there is an inconvenience that the user must carry the physical key. In addition, there is a case where the user desires to activate the hotel room function when the user leaves the hotel room. For example, when a user leaves the hotel room, the air conditioner or the washing machine may need to operate. In this case, in order for the hotel room function to be activated, the physical key must be continuously located inside the hotel room, so that the user can not leave the hotel room. However, when the local security method according to the embodiment of the present invention is applied to an operation in a hotel room, the user terminal can replace the physical key described above, and accordingly, the above- . Hereinafter, an embodiment in which a local area security method according to an embodiment of the present invention is applied to an operation in a hotel room will be described in detail.

Hereinafter, a first modified example of area-based security will be described with reference to FIG.

24 is a flowchart showing a first modification of the area-based security method according to an embodiment of the present invention.

24, the operation between the user terminal and the door opening and closing device 3000 in the first modification of the area-based security method can be performed according to any one of the first and second embodiments, A detailed description thereof will be omitted.

24, a first modification of the local security method includes a step S1100 in which the user terminal 2000a transmits door passing history information to the authentication server 1000, a step S1100 in which the authentication server 1000 accesses the hotel controller 7000, (S1200), the hotel controller 7000 activates the room function (S1205), the user terminal 2000a transmits the advancement history information to the authentication server 1000 (S1210) , The authentication server 1000 transmits a room function inactivity command to the hotel controller 7000 in step S1215 and the hotel controller 7000 inactivates the function of the corresponding room in step S1220, (S1225), the authentication server 1000 transmits an activation command of the requested function to the hotel controller 7000 (S1235), the hotel controller 7000 activates the requested function of the corresponding room (S1235). If the authentication server 1000 determines in advance A step S1240 of determining whether the entry history information is acquired within a predetermined period of time, a step S1240 of transmitting the inactive command of the request function to the authentication server 1000, (S1250).

According to some embodiments of the present invention, a step in which the user terminal 2000a transmits the entry history information to the authentication server 1000 may be performed (S1100).

The entry history information may include at least one of information indicating that the door is permitted to be opened, door identification information on the authorized door, and access state information.

The user terminal 2000a can transmit the entry history information to the authentication server 1000 when the user terminal 2000a receives the permission information from the door open /

The authentication server 1000 can acquire the entry history information from the user terminal 2000a and store it.

Also, the authentication server 1000 can determine the current location of the user terminal 2000a based on the entry history information and store the current location.

According to some embodiments of the present invention, a step may be performed in which the authentication server 1000 transmits a room function activation command to the hotel controller 7000 (S1200).

The authentication server 1000 can transmit a control command to the hotel controller 7000 based on the entry history information.

The authentication server 1000 can determine whether or not the user has passed through the door 4000 of the guest room based on the entry history information obtained from the user terminal 2000a.

The authentication server 1000 may transmit a room function activation command to the hotel controller 7000 to activate the predetermined electronic device among the electronic devices in the room when it is determined that the user has entered the room.

The activation and deactivation of the electronic device may be ON and OFF of the electronic device. Or the activation and deactivation of the electronic device may be the supply or non-supply of power to the electronic device.

According to the embodiment, the room function activation command may be a command for power supply to the corresponding room, and the in-room function inactivity command may be a command for power supply interruption to the corresponding room. In exceptional electronic devices such as refrigerators, which are always supplied with power, they may be excluded from the room function activation command and the room function inactivity command.

According to some embodiments of the present invention, a step in which the hotel controller 7000 activates a room function may be performed (S1205).

The hotel controller 7000 can control the operation of the predetermined electronic device among the in-room electronic devices judged to be entered by the user on the basis of the room function activation command acquired from the authentication server 1000. [

According to some embodiments of the present invention, the step of the user terminal 2000a may transmit the advancement history information to the authentication server 1000 (S1210).

The authentication server 1000 can obtain the entry history information indicating that the user terminal 2000a has advanced through the door.

The entry history information may include at least one of information informing that the door is permitted to be opened, door identification information on the permitted door, and access state information.

Here, the entry history information and the entry history information may be different from each other.

The user terminal 2000a can transmit the entry history information to the authentication server 1000 when the door open / close apparatus 3000 receives the permission information indicating that the door opening authority is determined.

The authentication server 1000 can obtain the advance history information from the user terminal 2000a and store it.

Also, the authentication server 1000 may determine that the user terminal 2000a has gone out of the room based on the entry history information, and store the same.

According to some embodiments of the present invention, a step may be performed in which the authentication server 1000 transmits a room function disable command to the hotel controller 7000 (S1215).

The authentication server 1000 can transmit the in-room function inactivity command to the hotel controller 7000 to disable the in-room device when it is determined that the user has advanced from the inside to the outside of the room.

According to some embodiments of the present invention, the step of deactivating the function of the hotel controller 7000 may be performed (S1220).

The hotel controller 7000 can control to disable the function of the corresponding room based on the inactive function of the in-room function.

According to some embodiments of the present invention, the step of requesting the user terminal 2000a to perform a function of a room may be performed (S1225).

The authentication server 1000 can be requested from the user terminal 2000a to activate at least some of the electronic devices included in the guest room.

For example, the authentication server 1000 may obtain a request for activation of the air conditioner among the electronic devices included in the guest room from the user terminal 2000a.

The user terminal 2000a may output a GUI for inputting a function to be activated by a user, a selectable function or an output of the entire function and a user's approval for a function activation request.

According to some embodiments of the present invention, a step may be performed in which the authentication server 1000 transmits an activation command for the requested function to the hotel controller 7000 (S1230).

The authentication server 1000 may transmit an activation command for the requested function to the hotel controller 7000 based on the function activation request obtained from the user terminal 2000a.

Also, the authentication server 1000 can determine whether or not the user has the authority for the function included in the request. If the authorization server 1000 has the authority for the function included in the request, (7000).

Also, the authentication server 1000 may transmit a reject message to the user terminal 2000a if the user does not have the authority for the function included in the determination result.

According to some embodiments of the present invention, the step of activating the requested room function by the hotel controller 7000 may be performed (S1235).

The hotel controller 7000 can activate the electronic equipment included in the guest room based on the obtained request function activation command. For example, the hotel controller 7000 can control the air conditioner to be activated when the request included in the request function activation command is air conditioner activation. The hotel controller 7000 can also control the request function activation command to perform a detailed command when a detailed request such as a desired temperature is included. For example, the hotel controller 7000 can control the air conditioner or the heater included in the room so that the indoor temperature of the room is maintained at 24 degrees when the detail command is 24 degrees.

According to some embodiments of the present invention, the step of determining whether the authentication server 1000 has acquired the entry history information may be performed (S1240).

For example, when the authentication server 1000 is requested to turn on the passenger lamp from the user terminal 2000a, the authentication server 1000 can transmit a control command to the hotel controller 7000 to turn on the passenger lamp even if the user is out of the passenger room.

The authentication server 1000 can determine whether or not the entry history information has been obtained after acquiring the function activation request.

More specifically, the authentication server 1000 is installed in the guest room from the user terminal 2000a within a predetermined time from when the function activation request is obtained or the activation command for the requested function is transmitted to the hotel controller 7000 It can be determined whether the entry history information corresponding to the door has been acquired.

According to some embodiments of the present invention, the step in which the authentication server 1000 transmits an inactive command of the request function may be performed (S1245).

If it is determined that the entry history information corresponding to the door installed in the guest room can not be acquired from the user terminal 2000a within a predetermined time as a result of determining whether or not the entry history information has been obtained, the authentication server 1000 transmits a function requested by the hotel controller 7000 Lt; RTI ID = 0.0 > command. ≪ / RTI > The inactive command of the requested function may be an instruction to cancel the request function activation command transmitted to the hotel controller 7000 by a request from the user terminal 2000a in advance.

According to some embodiments of the present invention, the step of the hotel controller 7000 transmitting an inactive command of the request function may be performed (S1250).

The hotel controller 7000 can control the function activated in step S1235 to be inactive.

Alternatively, for example, the hotel controller 7000 can cancel the command that was controlled in step S1235 based on the inactive command of the requested function.

4.4.2. Local Area Security Method - 2nd Variation example

Hereinafter, a second modification of area-based security will be described with reference to FIG.

FIG. 25 is a flowchart showing a second modification of the area-based security method according to an embodiment of the present invention.

Referring to FIG. 25, a second modification of the local security method includes a step S1300 of acquiring first door entry history information, a step S1310 of activating a room function, a step of determining whether or not the second door entry history information is acquired A step S1330 of maintaining the room function activation, a step S1340 of inactivating the room function, a step S1350 of acquiring the second door entry history information, and a step S1360 of activating the room function .

According to some embodiments of the present invention, the step of acquiring the first door entry history information may be performed (S1300).

The user terminal 2000a may transmit the first door entry history information to the authentication server 1000 when the first door opening / closing apparatus 3000a receives the permission information indicating that the first door opening and closing apparatus 3000a has determined that the first door is opened .

The first door may be a predetermined door except the door of the room where the user is staying. For example, the first door may be at least one of the doors of the hotel lobby. In another example, the first door may be a door that enters the guest room corridor.

The authentication server 1000 may acquire and store the first door entry history information from the user terminal 2000a.

Also, the authentication server 1000 may determine that the user of the user terminal 2000a has entered the first door based on the entry history information, and store the result.

Also, according to some embodiments of the present invention, a step of activating a room function may be performed (S1310).

The authentication server 1000 can transmit a control command to the hotel controller 7000 based on the first door entry history information.

The authentication server 1000 controls the hotel controller 7000 to activate the predetermined electronic device among the electronic devices in the room where the user terminal 2000a is accommodated based on the first entry history information acquired from the user terminal 2000a Room function activation command can be transmitted.

The activation and deactivation of the electronic device may be ON and OFF of the electronic device. Or the activation and deactivation of the electronic device may be the supply or non-supply of power to the electronic device.

According to the embodiment, the room function activation command may be a command for power supply to the corresponding room, and the in-room function inactivity command may be a command for power supply interruption to the corresponding room. In exceptional electronic devices such as refrigerators, which are always supplied with power, they may be excluded from the room function activation command and the room function inactivity command.

According to some embodiments of the present invention, a step of determining whether or not the second door access history information is acquired may be performed (S1320).

The authentication server 1000 can determine whether or not the second door access history information for the second door provided in the guest room accommodated by the user is obtained.

More specifically, the authentication server 1000 receives the first door entry history information from the user terminal 2000a from the time when the first door entry history information is obtained or within a predetermined time from when the guest room activation command is transmitted to the hotel controller 7000, It is possible to judge whether or not the entry history information has been acquired.

Also, according to some embodiments of the present invention, a step of maintaining the activation of the room function may be performed (S1330).

The authentication server 1000 can maintain the activation of the room function when the second door access history information is acquired. More specifically, the authentication server 1000 receives the first door entry history information from the user terminal 2000a from the user terminal 2000a at the time of acquiring the first door entry history information or within a predetermined time from when the guest room function activation command is transmitted to the hotel controller 7000 When the history information is acquired, the activation of the room function can be maintained.

It may be that the hotel controller 7000 does not transmit the cancel command or the room function disable command for the room function activation command to maintain the activation of the room function.

Also, according to some embodiments of the present invention, a step of deactivating the function of the room may be performed (S1340).

When the authentication server 1000 fails to acquire the second door access history information, the authentication server 1000 may transmit a room function deactivation command to the hotel controller 7000 to deactivate the room function. More specifically, the authentication server 1000 receives the first door entry history information from the user terminal 2000a from the user terminal 2000a at the time of acquiring the first door entry history information or within a predetermined time from when the guest room function activation command is transmitted to the hotel controller 7000 If the history information can not be obtained, the hotel controller 7000 can transmit a room function deactivation command.

According to some embodiments of the present invention, the step of obtaining the second door access history information may be performed (S1350).

When the user terminal 2000a receives the permission information from the second door opening / closing apparatus 3000b indicating that it is determined that the second door is open, the second user terminal 2000a may transmit the second door entry history information to the authentication server 1000 .

The second door may be a door of a room where the user is staying. For example, the second door may be an entrance door of a room where the user is staying.

The authentication server 1000 can acquire and store the second door entry history information from the user terminal 2000a.

Also, the authentication server 1000 can determine that the user of the user terminal 2000a has entered the second door based on the entry history information, and store the result.

Also, according to some embodiments of the present invention, a step of activating a room function may be performed (S1360).

The authentication server 1000 controls the hotel controller 7000 to activate the predetermined electronic device among the electronic devices in the room where the user terminal 2000a is accommodated based on the second entry history information acquired from the user terminal 2000a Room function activation command can be transmitted.

Accordingly, a modification of the local security method according to an embodiment of the present invention is that when the entrance or exit of the door key or the card is lost even if the door is lost, the electronic device is not activated, Can be prevented. In addition, a modification of the local security method according to an embodiment of the present invention can increase the convenience of users by requesting activation of some functions even while out of the office.

While the present invention has been described with reference to exemplary embodiments, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be apparent to those skilled in the art that changes or modifications may fall within the scope of the appended claims.

Claims (9)

An access control method for issuing an authentication token to be temporarily applied to a permission change target,
Requesting a change of authority for at least one of a user and a door, the request for changing the authority including a change subject, a change history and a change condition;
Extracting an object to which an authority is to be changed based on at least one of the object of change, the change history, and the change condition; And
And transmitting the authentication token generated based on the change history and the change condition to the extracted user terminal
Access control method.
The method according to claim 1,
The step of extracting the object to be changed
A step of extracting user identification information included in the change object as a change object
Access control method.
The method according to claim 1,
The step of extracting the object to be changed
A step of extracting a user of a grade included in the change object as a change object
Access control method.
The method according to claim 1,
The step of extracting the object to be changed
If the change object is a door, extracting, as a change object, a user whose rights to the door should be changed
Access control method.
The method according to claim 1,
The step of transmitting the authentication token to the extracted user terminal
And requesting the user terminal to update with the authentication token that transmits the authentication token stored in advance
Access control method.
6. The method of claim 5,
Requesting to return to the pre-stored authentication token if at least one of a time limit and a condition for the change of authority is released
Access control method.
The method according to claim 1,
The step of obtaining a request for the rights change
Obtaining a request for the change of authority upon occurrence of a predetermined event from at least one of a fire alarm system and a disaster management system
Access control method.
A recording medium on which a program for performing the method according to any one of claims 1 to 8 is recorded.
A server apparatus for issuing an authentication token to be temporarily applied to a permission change target,
A server communication unit; And
A request for a change of authority to at least one of a user and a door; a request for the change of authority includes a change object, a change history, and a change condition; And a server control unit for extracting an object to be changed on the basis of at least one of the plurality of authentication tokens and controlling the transmission of the authentication token generated based on the change details and the change condition to the extracted target user terminal
Server device.

Images