KR20190044786A - Method for Controlling Distributed Facility Access by using Short Distance RF Signal - Google Patents

Abstract

The present invention relates to a distributed facility access control method using a near field wireless signal, which is executed through an application installed in a user wireless terminal having a near field wireless unit for transmitting and receiving a near field wireless signal of a designated standard. The method comprises: a first step in which the application receives and reads a near field wireless signal transmitted through a signal module provided in a designated facility through a near field wireless unit of the wireless terminal, and recognizes signal recognition information including at least one identification information included in the near field wireless signal; a second step in which the application performs a user authentication process of a designated analog recognition method using a user body in connection with a touch screen of the wireless terminal; a third step in which, when an authentication result including the result of authenticating the user through the analog recognition method is confirmed, the application generates history information on facility access of the user by using designated N (N >= 2) pieces of information among at least one identification information included in the signal recognition information recognized through the near field wireless signal, at least one identification information stored in a designated storage area of the user wireless terminal, and authentication related information confirmed in the process of authenticating the user in the analog recognition method; and a fourth step in which the application encrypts the generated history information in a designated encryption manner, and stores the encrypted information in a designated storage area. Thus, a hacking attempt is shut off without exposing a facility device to the outside.

Description

TECHNICAL FIELD [0001] The present invention relates to a distributed facility access control method using a short-

The present invention recognizes a local wireless signal transmitted from a signal module included in a facility designated by a local wireless unit of the wireless terminal in an app of a user wireless terminal to determine a facility accessed by the user, When the user is authenticated in a distributed manner through the analog recognition method, the user generates history information on access to the facility, encrypts the information with the designated encryption method, and safely stores and manages the information in the designated storage area.

Conventionally, in order to selectively allow the user to access the facility, each facility is provided with a facility device for authenticating the user's access, and the user inputs digital information (e.g., a password or the like) assigned to the facility device, It is possible to selectively access the facility through the biometric authentication using the device. For example, the door of the building is provided with a locking device for locking the door, and the user can enter the password into the locking device or unlock the locking device by recognizing the fingerprint.

However, in the case of performing user authentication through a facility device provided in a facility, such as a conventional facility management, the facility device can be easily hacked through the exposed interface for user authentication of the facility device, Facilities have serious problems that are occupied or exploited by hackers. For example, a skilled locksmith can easily unlock any lock through the interface of the door lock that is exposed to the outside for user authentication.

In order to solve the above problems, an object of the present invention is to provide a wireless wireless terminal that recognizes a local wireless signal transmitted through a signal module provided in a facility designated by a local wireless unit of the wireless terminal, Recognizes the signal recognition information including the signal, and when the user authenticates the user in a distributed manner by performing the user authentication procedure of the designated analog recognition method using the body of the user in the application of the user wireless terminal, The present invention provides a distributed facility access control method that allows a user to access a facility without exposing the facility apparatus provided in the facility to the outside.

It is another object of the present invention to recognize a local wireless signal transmitted through a signal module provided in a facility through a local wireless unit of the wireless terminal in an app of a user wireless terminal to recognize signal recognition information including one or more identification information And an application of the user wireless terminal performs a user authentication procedure of a designated analog recognition method using the body of the user so that at least one identification information included in the recognized signal recognition information, A history of a user's facility access using at least one identification information stored in a designated storage area of a wireless terminal and N (N > = 2) pieces of information among authentication related information confirmed in the process of authenticating a user using the analog recognition method The information is generated and encrypted with the specified encryption method, The present invention provides a distributed facility access control method that manages the access history of a facility so that it can not be falsified or altered.

A distributed facility access control method using a short range wireless signal according to the present invention is a method of executing a distributed access method using an app installed in a user wireless terminal having a short range wireless unit transmitting and receiving a short range wireless signal of a specified standard, A first step of receiving and reading a short range wireless signal transmitted through a signal module provided in a designated facility through a short range wireless unit of the terminal and recognizing signal identification information including at least one identification information included in the short range wireless signal; A second step of the user performing a user authentication procedure of a specified analog recognition method using the user's body in connection with the touch screen of the wireless terminal by the application; and a second step of performing an authentication result including a result of authenticating the user through the analog recognition method If it is confirmed that the app is a signal recognized through the short-range wireless signal (N > = 2) of at least one identification information included in the information, at least one identification information stored in a designated storage area of the user wireless terminal, and authentication related information confirmed in the process of authenticating the user using the analog identification method, And a fourth step of encrypting the generated history information with the designated encryption method and storing the generated history information in a designated storage area by the application, do.

According to the present invention, the short range wireless signal may include a bluetooth-based wireless signal of the Bluetoth standard.

According to the present invention, the signal recognition information may include facility identification information that uniquely identifies a facility equipped with the signal module transmitting the near field radio signal.

According to the present invention, the signal recognition information may include location identification information for identifying a location of a facility equipped with the signal module transmitting the short-range wireless signal.

According to the present invention, at least one identification information included in the signal recognition information may be at least one of a code information form of a designated code system, an address information form of a specified address system, and a combination form of code information and address information have.

According to the present invention, it is preferable that the analog recognition method is not a digital input method for inputting information stored by a user.

According to the present invention, the analog recognition method may include a method of recognizing physical quantities continuously generated by the user's body and authenticating whether the registered pattern information is stochastically matched within a tolerance range.

According to the present invention, the analog recognition method includes a method of touching and authenticating a handwritten signature of a user on the basis of a handwriting signature recognition interface displayed on a touch screen of the wireless terminal, a method of authenticating an iris recognition interface displayed on a touch screen of the wireless terminal A method of recognizing and authenticating a user's iris through a camera unit of the wireless terminal, a method of recognizing and authenticating a user's fingerprint through a fingerprint sensor unit of the wireless terminal based on a fingerprint recognition interface displayed on a touch screen of the wireless terminal And may include at least one.

According to another aspect of the present invention, there is provided a distributed facility access control method using the short-range wireless signal, comprising: a handwritten signature registration interface for allowing the app to recognize a handwritten signature of a user through a touch screen of the wireless terminal, A step of generating pattern information on the user's handwritten signature that has been recognized by the application more than a specified number of times on the touch screen of the mobile terminal based on the handwritten signature registration interface and registering the pattern information in a designated storage area The method comprising the steps of:

According to the present invention, in the first step, when recognizing the signal recognition information included in the near-field wireless signal, the app recognizes a handwritten signature recognition interface for touching the handwritten signature of the user through the touch screen of the wireless terminal And a step of displaying an image.

According to the present invention, in the second step, the handwritten signature information of the user who is touch-recognized through the touch screen of the wireless terminal, based on the handwriting signature recognition interface displayed on the touch screen of the wireless terminal, Authenticating that the pattern information of the signature matches within an allowed tolerance range.

According to another aspect of the present invention, there is provided a distributed facility access control method using a short range wireless signal, the method comprising: displaying an iris registration interface for allowing the application to recognize a user's iris through a touch screen of the mobile terminal and registering the iris in a designated storage area And a step of generating pattern information on iris of the user recognized by the app more than a designated number of times through the camera unit of the wireless terminal based on the iris registration interface and registering the pattern information in a designated storage area .

According to the present invention, in the first step, when recognizing the signal recognition information included in the near-field wireless signal, the app displays an iris recognition interface for recognizing the iris of the user through the touch screen of the wireless terminal As shown in FIG.

According to the present invention, in the second step, the iris information of the user recognized by the camera unit of the wireless terminal based on the iris recognition interface displayed on the touch screen of the wireless terminal is transmitted to the user iris pattern information And authenticating whether it matches within an allowed tolerance range.

According to another aspect of the present invention, there is provided a distributed facility access control method using a local wireless signal, the method comprising: displaying a fingerprint registration interface for allowing the application to recognize a fingerprint of a user through a touch screen of the mobile terminal and registering the fingerprint in a designated storage area And a step of generating the pattern information of the user fingerprint recognized by the application a predetermined number of times or more through the fingerprint sensor unit of the wireless terminal based on the fingerprint registration interface and registering the pattern information in the designated storage area .

According to the present invention, in the first step, when the signal recognition information included in the near-field radio signal is recognized,

And displaying the fingerprint recognition interface for allowing the application to recognize the fingerprint of the user through the touch screen of the wireless terminal.

According to the present invention, in the second step, the fingerprint information of the user recognized by the fingerprint sensor unit of the wireless terminal based on the fingerprint recognition interface displayed on the touch screen of the wireless terminal, And matching within the allowed tolerance range.

According to the present invention, in the second step, when the user is authenticated through at least one of the analog recognition methods, the app verifies the location information of the wireless terminal that has authenticated the user through the analog recognition method, A location confirmation step of confirming the facility location information by using the information included in the signal recognition information recognized through the analog recognition method; And a location authentication step of authenticating whether the matching is within an allowable range.

According to the present invention, the step of checking the location may include checking the location information of the wireless terminal positioned through the location location unit of the wireless terminal at the time when the application authenticates the user using the analog recognition method.

According to the present invention, the step of checking the location may include the step of the application inquiring and checking the location information of the facility registered in the operation server designated through the at least one identification information included in the signal recognition information.

According to the present invention, in the case where the location identification information of the facility is included in the signal recognition information recognized through the short range wireless signal, the location identification information included in the signal recognition information is read by the application, And confirming the location information of the facility.

According to the present invention, the third step may include at least one identification information included in the signal recognition information, at least one identification information stored in a designated storage area of the user wireless terminal, And generating history information including N pieces of pieces of information among the pieces of authentication-related information that have been confirmed in the course of the process.

According to the present invention, the authentication-related information may include handwritten signature information recognized by an analog recognition method through a touch screen for user authentication, iris information recognized by an analog recognition method through the camera unit for user authentication, Includes at least one of fingerprint information recognized as an analog recognition method through a fingerprint sensor unit, position information at a time of authenticating a user using the analog recognition method, and time information at a time of authenticating a user using the analog recognition method .

According to the present invention, the fourth step may include separating n (1? N <N) pieces of information to be hash out of N pieces of information included in the history information by the app, Encrypting the encrypted information by using a hash algorithm specified in the history information, and encrypting the encrypted information using a block-chain encryption technique for blocking the encrypted information to form a chain; m? N, N = n? m) information to be stored in an information storage area distributed on the network.

According to the present invention, in the fourth step, the application encrypts the application information by applying a hash algorithm specified for N pieces of information included in the history information, and blocks the encrypted information to form a chain, And processing the application to store m (1? M? N) pieces of information included in the encrypted information and the history information in an information storage area dispersed on the network.

According to the present invention, an app of a user wireless terminal recognizes a local wireless signal transmitted through a signal module included in a facility designated through a local wireless unit of the wireless terminal, recognizes signal recognition information including at least one identification information, The user of the user wireless terminal performs the user authentication procedure of the specified analog recognition method using the body of the user to allow the user to access the facility equipped with the signal module when the user is authenticated in a distributed manner, There is an advantage in that the attempt to access the facility is safely controlled and managed by blocking the hacking attempt itself without exposing the facility device to the outside.

According to the present invention, an app of a user wireless terminal recognizes a local wireless signal transmitted through a signal module included in a facility designated through a local wireless unit of the wireless terminal, recognizes signal recognition information including at least one identification information, When a user is authenticated in a distributed manner by performing a user authentication procedure of a designated analog recognition method using a body of a user in an app of a user wireless terminal, at least one identification information included in the recognized signal recognition information, (N &gt; = 2) pieces of information among at least one identification information stored in a designated storage area of the storage unit and authentication related information confirmed in the process of authenticating the user using the analog recognition method, And encrypts it with the specified encryption method. There is an advantage to manage the access history of the facility so that it can not be falsified or tampered by storage management.

1 is a diagram illustrating a functional configuration of a wireless terminal and an app for access control of a distributed facility according to an embodiment of the present invention.
2 is a diagram illustrating a process of registering pattern information on a user's handwritten signature according to the first embodiment of the present invention.
3 is a diagram illustrating a process of authenticating a user in a distributed manner by recognizing a handwritten signature of a user who accesses a facility according to the first embodiment of the present invention as an analog recognition method.
4 is a diagram illustrating a process of registering pattern information on a user's iris according to a second embodiment of the present invention.
FIG. 5 is a diagram illustrating a process of authenticating a user in a distributed manner by recognizing the iris of a user who approaches a facility according to a second embodiment of the present invention as an analog recognition method.
FIG. 6 is a diagram illustrating a process of registering pattern information on a fingerprint of a user according to a third embodiment of the present invention.
FIG. 7 is a diagram illustrating a process of authenticating a user in a distributed manner by recognizing a fingerprint of a user who accesses a facility according to a third embodiment of the present invention as an analog recognition method.
8 is a view illustrating a process of matching and authenticating a location of a user authenticated by an analog recognition method and a location of a facility according to an embodiment of the present invention.
9 is a diagram illustrating a process of encrypting and storing history information on a facility access of a user authenticated by an analog recognition method according to a first embodiment of the present invention.
FIG. 10 is a diagram illustrating a process of encrypting and storing history information on a facility access of a user authenticated by an analog recognition method according to a second embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention.

In other words, the following embodiments correspond to the preferred embodiment of the preferred embodiment of the present invention. In the following embodiments, a specific configuration (or step) is omitted, or a specific configuration (or step) (Or steps), or an embodiment that incorporates functions implemented in more than one configuration (or step) into any one configuration (or step), a particular configuration (or step) It will be apparent that the present invention is not limited to the embodiments described below. Therefore, it should be clearly stated that various embodiments corresponding to subsets or combinations based on the following embodiments can be subdivided based on the filing date of the present invention.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

FIG. 1 is a diagram illustrating a functional configuration of a wireless terminal 100 and an application 130 for distributed facility access control according to an embodiment of the present invention.

In more detail, FIG. 1 is a block diagram of a mobile communication terminal receiving and reading a short distance wireless signal transmitted from a signal module 195 included in a designated facility, recognizing signal recognition information including at least one identification information included in the short distance wireless signal, When at least one identification information included in the signal recognition information and at least one identification information stored in a designated storage area of the user wireless terminal 100, (N &gt; = 2) pieces of information among the authentication related information confirmed in the process of authenticating the user using the analog recognition method, (130) (Application) that performs the specified procedure for storing in the area And a wireless terminal 100 having the wireless terminal 100 and the app 100. The wireless terminal 100 and the app 100 may have the same functions as those of the wireless terminal 100 according to the first embodiment of the present invention. The present invention is not limited to the above-described embodiments, and various changes and modifications may be made without departing from the scope of the present invention. Preferably, the wireless terminal 100 of FIG. 1 may include at least one of various mobile communication terminals, various mobile phones, various smartphones, and various tablet PCs.

1, the wireless terminal 100 includes a control unit 102, a memory unit 118, a screen output unit 104, a user input unit 106, a sound processing unit 108, a short range wireless unit 110, A camera unit 115, a fingerprint sensor unit 120, a wireless network communication unit 112, a local area network communication unit 114, a positioning unit 125, a USIM reader unit 116, and a USIM. .

The control unit 102 is a general term for controlling the operation of the wireless terminal 100. The control unit 102 includes at least one processor and an execution memory, BUS). According to the present invention, the control unit 102 loads at least one program code included in the wireless terminal 100 into the execution memory through the processor, and outputs the result through at least one configuration And controls the operation of the wireless terminal 100. FIG. Hereinafter, the configuration of the app 130 of the present invention, which is implemented in the form of program code for convenience, will be described in the control unit 102.

The memory unit 118 is a generic name of a nonvolatile memory corresponding to a storage resource of the wireless terminal 100 and includes at least one program code executed through the control unit 102 and at least one Save and maintain the dataset. The memory unit 118 basically comprises a system program code and a system data set corresponding to the operating system of the wireless terminal 100, a communication program code and a communication data set for processing a wireless communication connection of the wireless terminal 100, A program code and a data set corresponding to the app 130 of the present invention are also stored in the memory unit 118. [

The screen output unit 104 includes a screen output unit such as a liquid crystal display (LCD) and a driving module for driving the screen output unit 104. The screen output unit 104 is connected to the control unit 102, And outputs an operation result corresponding to the output to the screen output device.

The user input unit 106 is composed of one or more user input devices (e.g., a button, a keypad, a touch pad, a touch pad interlocked with the screen output unit 104) and a drive module for driving the same. And inputs a command for instructing various operations of the control unit 102 or data necessary for the operation of the control unit 102. [

According to the embodiment of the present invention, the touch screen 105 for touch input is implemented by combining the screen output device and the transparent touchpad user input device. Preferably, the touch screen 105 includes a capacitive touch screen 105 that receives a touch input using a capacitance of a human body.

The sound processing unit 108 includes a speaker, a microphone, and a driving module that drives the speaker. The sound processing unit 108 decodes sound data corresponding to the sound output from the various calculation results of the control unit 102 and outputs the sound data through the speaker , Or a sound signal input through the microphone, and transmits the encoded sound signal to the controller 102.

The short-range wireless unit 110 is a collective term for transmitting and receiving a short-range wireless signal of a specified standard that can effectively transmit and receive data within a specified short-range range. The short-range wireless unit 110 preferably includes a signal module 195, And a function of receiving a short-range radio signal transmitted to the base station. For example, the short range wireless unit 110 may transmit and receive a Bluetooth-based wireless signal of a Bluetoth standard, or transmit and receive an NFC-based wireless signal of an NFC (Near Field Communication) standard, (Ultra Wide Band) standard UWB-based radio signals, and can transmit / receive ZigBee-based ZigBee-based radio signals. According to another embodiment of the present invention, The short range wireless unit 110 may transmit and receive a Wi-Fi based wireless signal. That is, the short range wireless unit 110 of the present invention collectively refers to a configuration unit included in the wireless terminal 100 to transmit and receive a short range wireless signal that can be effectively transmitted and received within a predetermined short range according to a specified standard, The present invention is not limited by the type and version of the standard to be transmitted and received. Meanwhile, when the short range wireless unit 110 transmits / receives a blue-based wireless signal, the Bluetooth-based wireless signal may include an asynchronous Bluetooth wireless signal (e.g., a BLE-based wireless signal) capable of transmitting and receiving without pairing. Meanwhile, according to an embodiment of the present invention, the short-range wireless unit 110 may be integrated (or the same configuration) with the short-range network communication unit 114 that connects a short-range network The present invention is not limited thereto.

The camera unit 115 includes at least one lens unit that receives an optical signal reflected from a subject, an image sensor unit that detects an optical signal input through the lens unit and converts the optical signal into an electrical image signal, (For example, an infrared filter or the like) between the lens unit and the image sensor unit according to an embodiment of the present invention, . Meanwhile, the camera unit 115 includes a PCB for providing image information (e.g., image) and image information (e.g., moving image) generated through the image sensor unit to the control unit 102, And an image signal processor (ISP) for processing the image information or image information according to a designated procedure for improving the quality of image information or image information generated through the sensor unit.

According to the method of the present invention, the camera unit 115 may perform the function of an iris sensor unit for capturing an image of a user to recognize the iris.

The fingerprint sensor unit 120 includes a sensor unit for recognizing a fingerprint (for example, a ridge structure) and a drive module for driving and controlling the sensor unit. The electrostatic sensor unit using electrostatic capacitance, the optical sensor unit using an optical signal, A sensor unit for sensing electrical conduction, an ultrasonic sensor for sensing ultrasonic waves, and a sensor unit for detecting heat, may be included. Preferably, the fingerprint sensor unit 120 mounted on the wireless terminal 100 includes an electrostatic sensor unit or a semiconductor device type sensor unit. However, the present invention is not limited thereto, To be included in the scope of the present invention. The fingerprint sensor unit 120 may provide fingerprint information sensed through at least one sensor unit (for example, raw fingerprint information or fingerprint information that has undergone a specified process) to the control unit 102. If the wireless terminal 100 is provided with a separate fingerprint authentication module for fingerprint authentication, the fingerprint sensor unit 120 may provide fingerprint information sensed through at least one sensor unit to the fingerprint authentication module.

The wireless network communication unit 112 and the short-range network communication unit 114 are collectively referred to as communication resources for connecting the wireless terminal 100 to a designated communication network. The wireless terminal 100 may include a wireless network communication unit 112 as a basic communication resource and may include one or more short-range network communication units 114.

The wireless network communication unit 112 is a collective term for communication resources that connect the wireless terminal 100 to a wireless communication network via a base station and includes an antenna for transmitting and receiving a radio frequency signal of a specific frequency band, And at least one processing module. The control unit 102 is connected to the control unit 102 and transmits operation results corresponding to wireless communication among various operation results of the control unit 102 through a wireless communication network or receives data through a wireless communication network To the control unit 102, and performs the connection, registration, communication, and handoff procedures of the wireless communication. According to the present invention, the wireless network communication unit 112 can connect the wireless terminal 100 to a communication network including a communication channel and a data channel via the exchange, and in some cases, Based wireless network data communication (e.g., the Internet).

According to an embodiment of the present invention, the wireless network communication unit 112 is a mobile communication unit that performs at least one of connection to a mobile communication network, location registration, call processing, call connection, data communication, and handoff according to the CDMA / WCDMA / &Lt; / RTI &gt; Meanwhile, according to the intention of a person skilled in the art, the wireless network communication unit 112 may further include a portable Internet communication structure for performing at least one of connection to the portable Internet, location registration, data communication and handoff according to the IEEE 802.16 standard, It is evident that the present invention is not limited by the wireless communication configuration provided by the wireless network communication unit 112. [ That is, the wireless network communication unit 112 is a general term for a configuration unit that accesses a wireless communication network through a cell-based base station irrespective of a frequency band of a wireless zone, a type of a communication network, or a protocol.

The short-range network communication unit 114 is a general term for communication resources that connect a communication session using a radio frequency signal within a predetermined distance (e.g., 10 m) as a communication medium and connect the wireless terminal 100 to the communication network based on the communication session , The wireless terminal 100 may be connected to the communication network through at least one of Wi-Fi communication, Bluetooth communication, public wireless communication, and UWB. According to an embodiment of the present invention, the short-range network communication unit 114 may be integrated with or separated from the wireless network communication unit 112. According to the present invention, the short-range network communication unit 114 connects the wireless terminal 100 to a data network providing packet-based short-range wireless data communication through a wireless AP.

The USIM reader unit 116 is a generic term of a configuration for exchanging at least one data set with a universal subscriber identity module that is mounted or detached from the wireless terminal 100 based on the ISO / IEC 7816 standard , And the data set is exchanged in a half duplex communication manner through an APDU (Application Protocol Data Unit).

The USIM is an SIM type card having an IC chip according to the ISO / IEC 7816 standard, and includes an input / output interface including at least one contact connected to the USIM reader unit 116, (Or processing) the program code for the IC chip or extracting (or processing) the data set in accordance with at least one command transmitted from the wireless terminal 100 in connection with the input / output interface To the input / output interface.

The positioning unit 125 is a collective term of positioning resources for positioning the position of the wireless terminal 100. The positioning unit 125 is preferably a positioning system using GPS (Global Positioning System), a network system positioning using network resources, And a hybrid method in which the wireless terminal 100 is combined with a network system. The terminal mode positioning is a technique for precisely positioning the position of the wireless terminal 100 through a GPS module (or a module including a GPS function) built in the wireless terminal 100, (Assisted-GPS) system that the base station 100 reads and informs the base station, a DGPS (Differential GPS) system that receives the correction signal from the ground reference receiver and corrects the error of the position signal received from the satellite, and the like have. The network-based positioning is a positioning technique using network resources that can be interlocked with the wireless terminal 100. The network-based positioning is a cell ID scheme that grasps the location of the wireless terminal 100 through the service cell ID of the base station, An AOA (Angle-Of-Arrival) scheme using differences in signal receiving angles between three base stations receiving a signal of a terminal, and an enhanced cell ID scheme in which accuracy is improved by adding distance information of a base station and two adjacent base stations A TOA (Time of Arrival) method using a difference in signal arrival time of a base station, and a Time Difference Of Arrival (TDOA) method of measuring a signal delay of adjacent base stations based on a base station signal. Enhanced Observed Time Difference (E-OTD), which measures the difference in the time that a radio wave is transmitted from a base station to a mobile station, The position of the wireless terminal 100 is located via a separate positioning server, and the location positioning unit 125 is located in the wireless area of the wireless terminal 100. In this case, After positioning the wireless terminal 100 through the positioning server in cooperation with the network communication unit 112 or the local area network communication unit 114, the positioning of the wireless terminal 100 from the positioning server Results can be provided.

The control unit 102 of the wireless terminal 100 downloads the app 130 of the present invention from a designated program providing server (for example, Apple's app store 130) via a data network to which the communication resource can be connected, . Meanwhile, the app 130 downloaded and installed in the wireless terminal 100 may be installed in the combination of the wireless terminal 100 and the app 130 (or the app 130 is installed) (E.g., an app identification, a device token, a UUID, etc.) that uniquely identifies the wireless terminal 100 (or the app 130 installed in the wireless terminal 100) with a unique medium, And registers the media identification information that uniquely identifies the combination of the wireless terminal 100 and the app 130 with a unique medium in the designated operation server 185. [ Meanwhile, the application 130 of the wireless terminal 100 performs a procedure of registering terminal identification information (e.g., telephone number, IMSI, IMEI, etc.) that uniquely identifies the wireless terminal 100 in the designated operation server 185 In this case, the operation server 185 may store and manage the medium identification information and the terminal identification information in association with each other. Meanwhile, the app 130 of the wireless terminal 100 may include user identification information (e.g., unique ID, name, date of birth, resident number, etc.) that uniquely identifies the user of the wireless terminal 100 installed the app 130 In this case, the operation server 185 may store and manage the medium identification information and the user identification information in association with each other.

Referring to FIG. 1, an application 130 of the wireless terminal 100 generates pattern information for a user's handwritten signature that has been recognized more than a designated number of times through the touch screen 105, and registers the pattern information in a designated storage area And / or performs a procedure for generating pattern information on the iris of the user recognized more than the designated number of times through the camera unit 115 and registering the pattern information in the designated storage area, and / And a pattern registration unit 135 for generating pattern information on the recognized user fingerprint over a predetermined number of times through the user interface 120 and performing a procedure for registering the pattern information in the designated storage area.

The pattern registration unit 135 registers pattern information (for example, pattern information on a user's handwritten signature and / or pattern information on a user's iris and / or user's fingerprints for user authentication of a designated analog recognition system using a user's body (E.g., at least one of a storage area set in the memory unit 118 or a security storage area protected by the control unit 102 or a storage area of the USIM) And / or a storage area corresponding to a storage medium of the designated operation server 185).

According to the first pattern registration embodiment of the present invention, the pattern registering unit 135 registers the user's handwritten signature on the touch screen 105 when the app 130 is first executed (or before pattern registration) Displaying a handwritten signature registration interface for registering in a designated storage area by touch recognition and performing a process of touching and recognizing a handwritten signature through the touch screen 105 on the basis of the handwritten signature registration interface for a specified number of times or more, Generates pattern information on the user's handwritten signature that is touch-recognized more than the designated number of times through the touch screen 105, and registers and stores the pattern information in a designated storage area. The pattern registering unit 135 may register the pattern data in at least one of a storage area set in the memory unit 118 and a storage area protected by the control unit 102 or a storage area of the USIM. The pattern information for the signature can be stored. Meanwhile, the pattern registration unit 135 may register the pattern information of the user's handwritten signature on the storage medium of the designated operation server 185 according to an embodiment of the present invention. In this case, The signature information of the operation server 185 is authenticated by referring to the pattern information stored in the storage medium of the operation server 185 and / or provides the user's handwritten signature information to the operation server 185, And it is evident that the present invention includes these embodiments as well.

According to the second pattern registration embodiment of the present invention, the pattern registration unit 135 recognizes the iris of the user through the touch screen 105 when the app 130 is first executed (or before pattern registration) after installation of the app 130 The iris registration interface for registering in the designated storage area and performing the process of recognizing the user iris through the camera unit 115 based on the iris registration interface a predetermined number of times or more, Generates pattern information for the user iris recognized more than the designated number of times, and registers and stores the pattern information in the designated storage area. The pattern registering unit 135 may store the pattern information of the user iris 120 in a storage area set in the memory unit 118 or in a storage area of at least one of a secure storage area protected by the control unit 102 and a storage area of the USIM. Lt; / RTI &gt; Meanwhile, according to the embodiment, the pattern registration unit 135 may perform a procedure of registering and storing pattern information on the user iris on a storage medium of the designated operation server 185. In this case, The iris information may be authenticated by referring to the pattern information stored in the storage medium of the operation server 185 and / or may be authenticated by the operation server 185 by providing the iris information of the user to the operation server 185 , It should be apparent that the present invention includes these embodiments as well.

According to the third pattern registration embodiment of the present invention, the pattern registration unit 135 recognizes the user's fingerprint through the touch screen 105 when the application 130 is first executed (or before pattern registration) after installation of the application 130 A fingerprint registration interface for registering in a designated storage area and performing a process of recognizing a user fingerprint through the fingerprint sensor unit 120 on the basis of the fingerprint registration interface for a specified number of times or more, And generates and stores the pattern information for the recognized user fingerprint in the designated storage area. The pattern registering unit 135 may store the user fingerprint in a storage area set in the memory unit 118 or a designated storage area in at least one of a security storage area protected by the control unit 102 and a storage area of the USIM. Lt; / RTI &gt; Meanwhile, the pattern registration unit 135 may register the pattern information of the user fingerprint on the storage medium of the designated operation server 185 according to the embodiment. In this case, The fingerprint information may be authenticated by referring to the pattern information stored in the storage medium of the operation server 185 and / or may be authenticated by the operation server 185 by providing the fingerprint information of the user to the operation server 185 , It should be apparent that the present invention includes these embodiments as well.

1, an app 130 of the wireless terminal 100 receives a short-range wireless signal (hereinafter referred to as a short-range wireless signal) transmitted at a predetermined signal intensity through a signal module 195 included in a designated facility through the short- And a signal recognition unit (140) for recognizing signal recognition information including at least one identification information included in the near field radio signal.

The signal recognition unit 140 displays a short range wireless signal recognition interface for receiving and recognizing a short range wireless signal transmitted through a signal module 195 provided at a designated facility through the touch screen 105, A bit string included in the short range wireless signal received through the short range wireless unit 110 is buffered in a designated buffer area and / or a buffer string is checked in a predetermined buffer area based on the wireless signal recognition interface, And reads the bit string through a code system to recognize signal recognition information including at least one identification information included in the near field radio signal.

According to an embodiment of the present invention, the signal recognition unit 140 recognizes a bit string included in the near-field wireless signal and reads the recognized bit string (for example, And performs a procedure of authenticating whether the received short range wireless signal is a short range wireless signal transmitted through the signal module 195 included in the facility according to the present invention. If the received short range wireless signal is authenticated as a short range wireless signal transmitted from the signal module 195 provided in the specified facility, the signal recognition unit 140 reads the bit string corresponding to the designated code system And may recognize one or more pieces of identification information included in the near-field wireless signal.

According to the embodiment of the present invention, the signal recognition unit 140 reads out a bit string included in the near-field wireless signal and transmits the near-field wireless signal to a facility having a signal module 195 Such as a door, a door, an electric meter of a specific building, a water meter of a specific building, and the like). Preferably, the facility identification information includes at least one of a code information form of a code system designated to uniquely identify the facility, an address information form of a designated address system corresponding to an address to be connected to uniquely identify the facility, And may be in the form of at least one of combinations.

Meanwhile, the signal recognition unit 140 may further include location identification information for identifying a location of a facility having the signal module 195 that reads the bit string included in the near field radio signal and transmits the near field radio signal, The above identification information can be recognized. Preferably, the location identification information includes at least one of a code information form of a code system designated to identify the location of the facility, an address information form of a designated address system corresponding to an address to be accessed for identifying the location of the facility, And a combination of information.

Meanwhile, the signal recognition unit 140 reads a bit string included in the near field radio signal and transmits the near field radio signal to the user with access to the facility including the signal module 195 (for example, When a facility equipped with the transmitted signal module 195 is a door, a facility having a signal module 195 'unlocking' or 'locking' the door or transmitting the short distance wireless signal is installed in the electric meter Or meter reading of the water meter or the water meter if the water meter is a water meter), or access identification information that identifies a procedure or procedure. Preferably, the access identification information may be at least one of a code information type of the designated code system, an address information type of the designated address system, and a combination form of the code information and the address information.

Meanwhile, according to the embodiment of the present invention, the signal recognition information read by the signal recognition unit 140 by reading the bit string included in the near-field radio signal includes not only the identification information but also the facility information identified by the facility identification information (For example, when generating a disposable authentication code designated for access by a user to a facility equipped with the signal module 195 that has transmitted the short-range wireless signal to the user), the disposable authentication code (Or code values used, for example), and / or access authentication information (e.g., decrypted (or stored) only through the app 130 designated to read the near- An authentication value encrypted to be decrypted only through a decryption key of the application 130), and the like. The information may also be made of a code information from, and at least one form in the form of combinations of address information, code information, and address information of the specified address of the specified system code system. That is, in the present invention, the signal recognition information, which is confirmed by reading the near-field radio signal, may include any information as far as it is necessary to manage and control access to facilities of the user. As shown in FIG.

Referring to FIG. 1, an application 130 of the wireless terminal 100 includes an interface display unit 145 for displaying an interface for user authentication using a user's body in association with the touch screen 105 And an interface displayed on the touch screen 105. The fingerprint sensor unit 120 may be configured to recognize the fingerprint sensor unit 120 in a specific area of the user's body using an analogue recognition method using the touch screen 105, A recognition processing unit 150 for recognizing unique identification information corresponding to a unique characteristic or a unique movement of the user's body, And an authentication processing unit 155 for authenticating whether or not the matching is within a predetermined error range.

When the signal recognition information is recognized through the signal recognition unit 140, the interface display unit 145 displays an interface for user authentication of the designated analog recognition type using the body of the user in cooperation with the touch screen 105 Display.

When the interface for user authentication of the designated analog recognition system using the body of the user is displayed, the recognition processor 150 recognizes the user's handwriting using the touch screen 105 based on the interface displayed on the touch screen 105, And a process of recognizing the user's iris information using the camera unit 115 and a process of recognizing the fingerprint information of the user using the fingerprint sensor unit 120, The authentication processing unit 155 recognizes that the unique recognition information recognized as the analog recognition method is the same as the recognition information using the pattern information registered in the storage area designated through the pattern registration unit 135, And performs an authentication procedure for authenticating whether the registered pattern information matches within an allowable error range.

In the present invention, the analog recognition method is not a digital input method for inputting information (for example, key input information) stored by a user but is a feature unique to the user's body or a characteristic unique to the user's body And a method of recognizing the generated physical quantity and authenticating whether it is matched with the previously registered pattern information stochastically within the tolerance range.

According to the method of the present invention, the analog recognition method of the present invention includes a method of touching and recognizing a handwritten signature of a user on the basis of a handwriting signature recognition interface displayed on the touch screen 105 of the wireless terminal 100, A method of recognizing and authenticating a user's iris through the camera unit 115 of the wireless terminal 100 based on the iris recognition interface displayed on the touch screen 105 of the terminal 100, And a method of recognizing and authenticating the user's fingerprint through the fingerprint sensor unit 120 of the wireless terminal 100 based on the fingerprint recognition interface displayed on the screen 105. [

According to the first analog recognition embodiment of the present invention, the interface display unit 145 displays a handwritten signature recognition interface for touching the user's handwritten signature through the touch screen 105, The authentication processing unit 155 performs a process of recognizing the user's handwritten signature information through the touch screen 105 based on a handwriting signature recognition interface displayed on the touch screen 105, Performs a procedure of authenticating whether the handwritten signature information of the user who is touch-recognized matches the pattern information of the user's handwritten signature registered in the designated storage area within an allowable error range.

According to the second analog recognition embodiment of the present invention, the interface display unit 145 displays an iris recognition interface for recognizing a user's iris through the touch screen 105, The authentication processing unit 155 performs a process of recognizing the user's iris information through the camera unit 115 based on the iris recognition interface displayed on the screen 105. The authentication processing unit The iris information of the user iris matching with the pattern information of the user iris registered in the designated storage area is matched within an allowable error range.

According to the third analog recognition embodiment of the present invention, the interface display unit 145 displays a fingerprint recognition interface for recognizing a fingerprint of a user through the touch screen 105, The authentication processing unit 155 performs a process of recognizing the fingerprint information of the user through the fingerprint sensor unit 120 based on the fingerprint recognition interface displayed on the screen 105. The authentication processing unit 155 recognizes And performs a procedure of authenticating whether the fingerprint information of the user who has been registered matches the pattern information of the user fingerprint registered in the designated storage area within an allowable error range.

Referring to FIG. 1, in a case where a user is authenticated through at least one analog recognition method, the app 130 of the wireless terminal 100 searches for a location of a wireless terminal 100 that has authenticated a user through the analog recognition method A location confirmation unit 160 for confirming the information and confirming the facility location information using the information included in the signal recognition information recognized through the short range wireless signal, and a wireless terminal 100 are matched within the allowable range with the location information of the facility.

When the authentication processing unit 155 authenticates the user through at least one analog recognition method, the location confirmation unit 160 confirms the location information of the wireless terminal 100 authenticated the user through the analog recognition method .

According to the embodiment of the present invention, the location determining unit 160 may determine the location of the user through the analog recognition method (for example, within a predetermined time before the user is authenticated through the analog recognition method, The location information of the wireless terminal 100 positioned through the location locator 125 of the wireless terminal 100 within a predetermined time after authenticating the user via the analog recognition method .

Meanwhile, the location confirmation unit 160 performs a procedure for confirming facility location information using the information included in the signal recognition information recognized through the short-range wireless signal.

According to an embodiment of the present invention, the location determining unit 160 may determine whether the location information is registered in the operation server 185 through at least one of the facility identification information and / or the location identification information included in the signal recognition information. The facility location information can be confirmed by inquiring the location information of the facility. Meanwhile, when the location information identifying the location of the facility is included in the signal recognition information recognized through the short-range wireless signal, the location confirmation unit 160 reads the location identification information included in the signal recognition information, The location information of the facilities can be confirmed.

When the location information of the wireless terminal 100 is confirmed and the facility location information is confirmed through the location confirmation unit 160, the location authentication unit 165 compares the location information of the wireless terminal 100 with the facility location information And performs a procedure of authenticating whether the location information of the wireless terminal 100 matches the location information of the facility within the allowable range.

Referring to FIG. 1, when the application 130 of the wireless terminal 100 confirms an authentication result including a result of authenticating a user through at least one analog recognition method, the application 130 authenticates a user through the analog recognition method And a facility access processing unit 170 for performing a designated access procedure for accessing the authenticated user to a facility equipped with the signal module 195 that has transmitted the short range wireless signal based on the authentication result including the result .

The facility access processing unit 170 includes a result of authenticating a user through at least one analog recognition method, and the location information of the wireless terminal 100 that has authenticated the user using at least one analog recognition method, And confirms the authentication result that further includes the result of authenticating whether the position information matches within the allowable error range. If the user is authenticated through the at least one analog recognition method and the location of the wireless terminal 100 authenticated the user is authenticated, the facility access processing unit 170 authenticates the user through the analog recognition method (For example, a signal module that transmits the near-field wireless signal to access the facility including the signal module 195 that has transmitted the near-field wireless signal based on the authentication result including the result of the authentication (At least one accessing procedure of 'unlocking' or 'locking' of the door if the facility having the door 195 is a door of a specific building) and omitting a separate approach procedure If the facility including the signal module 195 that transmits the near-field radio signal is an electric meter or water meter of a specific building, the meter reading process of the meter is used (A separate access procedure may be omitted).

According to an embodiment of the present invention, the facility includes a facility device 190 for processing a user access procedure (for example, when a facility equipped with the signal module 195 transmitting the short- Such as a locking device that processes at least one of an 'unlock' or a 'lock' of a door, the facility device 190 may be operatively coupled to a designated operating server 185 via a communication network and / (Not shown) for short-range wireless communication for the wireless terminal 100 or may process the short-range wireless communication for information exchange with the wireless terminal 100 through the signal module 195. [ Meanwhile, according to the embodiment, the facility may not have a separate facility apparatus 190 for processing the access procedure of the user. In this case, a separate access procedure for accessing the facility is omitted (provided that the facility apparatus 190 ) Access procedure is omitted and the user can access the facility).

According to the embodiment of the first aspect of the present invention, the facility device 190 of the facility may be linked to the designated operation server 185 through a communication network. In this case, the facility access processing unit 170 transmits facility access request information (for example, facility identification information for identifying a facility to be accessed by the user, facility access information of the user to the operation server 185) The operation server 185 receives the facility access request information from the application 130 of the wireless terminal 100 and transmits the facility access request (For example, command information for accessing the facility or information including the disposable authentication code or access authentication information generated for accessing the facility of the user) for accessing the facility by the user And transmits the information to the facility apparatus 190 of the facility through a communication network. The facility apparatus 190 receives the information from the operation server 185, Receiving the access information is read to be able to handle access procedures specified for facility access of the user based on the result. For example, if the facility is an entrance door of a specific building, and the access procedure to the door is 'unlock' of a door using a lock device provided in the door, the facility access processor 170 may access the operation server 185 transmits the facility access request information including the facility identification information for identifying the door and the disposable authentication code or the access authentication information generated for unlocking the door to the operation server 185, (For example, information including a disposable authentication code or access authentication information generated for unlocking a door) for 'unlocking' the door based on the facility access request information, And the locking device of the door is connected to the operation server 185 through the communication network, It receives and reads, based on the result can unlock the door.

According to the embodiment of the second aspect of the present invention, the facility device 190 of the facility includes a separate local communication unit (not shown) for short-range wireless communication for information exchange, The wireless terminal 100 may also process the short distance wireless communication with the wireless terminal 100 through the short range wireless unit 110 or the short distance wireless communication unit 114, Wireless communication can be processed. In this case, the facility access processing unit 170 may access the facility access information (for example, command information for accessing the facility or the disposable authentication code or access authentication information generated for accessing the facility of the user) Information to the facility device 190 of the facility through short-range wireless communication, and the facility device 190 receives the facility access information through the short-range wireless communication and transmits the facility access information to the user The designated access procedure can be processed. For example, if the facility is an entrance door of a specific building, and the access procedure to the door is 'unlocking' the door using the locking device provided in the door, the facility access processing unit 170 identifies the door Which is generated for the purpose of 'unlocking' the door, by constructing facility access information including the one-time authentication code or the access authentication information, Can be transmitted to the lock device of the door through the near field wireless communication of the terminal 100. The lock device of the door can receive and read the facility access information and unlock the door based on the result.

Referring to FIG. 1, when the application 130 of the wireless terminal 100 confirms an authentication result including a result of authenticating a user through at least one analog recognition method, At least one identification information included in the signal recognition information recognized through the signal, at least one identification information stored in a designated storage area of the wireless terminal 100, and authentication information A history generating unit 175 for generating history information on access to facilities of the user by using N (N &gt; = 2) pieces of information among the information, an encryption unit for encrypting the generated history information with a designated encryption method, And stores it in the encrypted storage unit 180. [

The location information of the wireless terminal 100 that has authenticated the user using at least one analog recognition method through the authentication processing unit 155 and the result of the authentication And the authentication result including the authentication result including the authentication result as the matching result within the allowable error range, the history generating unit 175 generates at least one identification information included in the signal recognition information, (N &gt; = 2) pieces of information among the at least one identification information stored in the designated storage area of the authentication information and authentication related information confirmed in the process of authenticating the user using the analog recognition method. Here, the at least one identification information included in the signal recognition information includes at least one identification information of the facility identification information included in the signal recognition information, the location identification information of the facility, and the access identification information for the facility . The at least one identification information stored in the designated storage area of the wireless terminal 100 may be initialized after installation of the app 130 to uniquely identify the combination of the wireless terminal 100 and the app 130 with a unique medium, The mobile terminal 100 may include at least one identification information among the medium identification information allocated to the mobile terminal 100, the terminal identification information that uniquely identifies the wireless terminal 100, and the user identification information that uniquely identifies the user. On the other hand, the authentication related information confirmed in the process of authenticating the user using the analog recognition method includes handwritten signature information recognized by an analog recognition method through the touch screen 105 for the user authentication, 115, fingerprint information recognized by the analog recognition method through the fingerprint sensor unit 120 for the user authentication, and fingerprint information recognized by the analog recognition method, And may include at least one of location information of the wireless terminal 100 and time information of the time when the user is authenticated using the analog recognition method. Preferably, the N pieces of information included in the history information include at least one identification information included in the signal recognition information, at least one identification information stored in a designated storage area of the wireless terminal 100, And may include information selectively designated from the authentication-related information that is confirmed in the process of authenticating the user.

At least one identification information included in the signal recognition information recognized through the short distance wireless signal through the history information generation unit, at least one identification information stored in a designated storage area of the wireless terminal 100, (N &gt; = 2) pieces of information among the authentication-related information confirmed in the process of authenticating the user, the encryption storage unit 180 encrypts the generated history information with the designated encryption method And stores it in the designated storage area.

According to the first encryption storage embodiment of the present invention, the encryption storage unit 180 separates n (1? N <N) pieces of information to be hash out of N pieces of information included in the history information, Encrypting the encrypted information by applying a hash algorithm specified for the encrypted information, and encrypting the encrypted information using a block-chain encryption technique for blocking the encrypted information to form a chain, m? N, N = n? m) information to be stored in an information storage area distributed on the network. Here, the n pieces of information and the m pieces of information may or may not include some redundant information, and even if the n pieces of information and the m pieces of information include some redundant information, It is preferable to include N pieces of information (N = n? M).

According to the second cryptographic storage embodiment of the present invention, the cryptographic storage unit 180 applies a hash algorithm specified to N pieces of information included in the history information, and blocks the cryptographic information to form a chain Block ciphering scheme, and m (1? M? N) pieces of information included in the encrypted information and the history information may be stored in an information storage area distributed on the network.

According to the third cryptographic storage embodiment of the present invention, the cryptographic storage unit 180 encrypts the ciphertext with an encryption algorithm specified in N pieces of information included in the history information, and stores the ciphertext in the secure storage area of the operation server 185 The present invention is not limited thereto.

2 is a diagram illustrating a process of registering pattern information on a user's handwritten signature according to a first embodiment of the present invention.

In more detail, FIG. 2 illustrates a process of recognizing a user's handwritten signature and registering pattern information on the handwritten signature of the user in order to authenticate a user who accesses the facility in a distributed manner. It is possible to refer to and / or modify the FIG. 2 to infer the various methods for the pattern information registration process (for example, a method in which some steps are omitted or a procedure is changed) However, the present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Referring to FIG. 2, an application 130 of the wireless terminal 100 displays a handwritten signature registration interface for registering a handwritten signature of a user on the touch screen 105 at the time of initial operation (or before pattern registration) ), And generates pattern information on the user's handwritten signature that has been recognized more than the designated number of times through the touch screen 105 based on the handwritten signature registration interface (205).

If the pattern information for the user's handwritten signature is generated, the app 130 of the wireless terminal 100 registers (210) the pattern information for the handwritten signature in the designated storage area.

FIG. 3 is a diagram illustrating a process of authenticating a user in a distributed manner by recognizing a handwritten signature of a user who accesses a facility according to the first embodiment of the present invention as an analog recognition method.

3 is a block diagram of the application 130 of the user wireless terminal 100 in the case of receiving and recognizing the short range wireless signal transmitted through the short range wireless unit 110 through the signal module 195 included in the facility, The app 130 of the wireless terminal 100 recognizes the handwritten signature of the user who will access the facility through the touch screen 105 as an analog recognition method and accesses the facility from the app 130 of the wireless terminal 100 The user is authenticated in a distributed manner. If the user is a person skilled in the art, referring to FIG. 3 and / or modified, the distributed user authentication process using the analog recognition method It is to be understood that the invention may be practiced otherwise than as specifically described herein, but it will be appreciated that the invention encompasses all such contemplated embodiments (s) , Only the exemplary method shown in the figure 3 is not limited that technical feature.

Referring to FIG. 3, the app 130 of the wireless terminal 100 transmits a short-range wireless signal transmitted through a signal module 195 provided in a specified facility through the short- range wireless unit 110 of the wireless terminal 100 (300), and recognizes the signal recognition information including one or more pieces of identification information included in the near field radio signal by reading the received near field radio signal. Preferably, the app 130 of the wireless terminal 100 includes facility identification information that uniquely identifies a facility having the signal module 195 that has transmitted the short-range wireless signal, and a signal module 195), and access identification information that identifies a user's access method or procedure for the facility. In this case, the signal recognition information includes at least one of the location identification information for identifying the location of the facility, On the other hand, the signal recognition information may include, in addition to the identification information, access code information necessary for the user to access the facility identified by the facility identification information and / or access to the facility identified by the facility identification information And access authentication information.

If signal recognition information including one or more identification information is recognized by reading the short distance wireless signal transmitted through the signal module 195 provided in the facility, the app 130 of the wireless terminal 100 transmits the short- (310) a handwritten signature recognition interface for touching the handwritten signature of the user via the touch screen (105) of the mobile terminal (100), and a handwritten signature recognition interface displayed on the touch screen (105) The handwritten signature information of the user is touched by the analog recognition method through the touch screen 105 of the wireless terminal 100 (315). If the user's handwritten signature information is touch-recognized through the touch screen 105 using the analog recognition method, the app 130 of the wireless terminal 100 can recognize the touch recognition using the analog recognition method through the touch screen 105 (320) a procedure for authenticating that the user's handwritten signature information matches within the allowed error bounds with the pattern information of the user handwritten signature registered in the designated storage area.

If the handwritten signature information of the touch-recognized user is not matched with the pattern information of the user's handwritten signature registered in the designated storage area within the allowable tolerance range, the app 130 of the wireless terminal 100 transmits the touch- An authentication error for the user's handwritten signature information is displayed (325). Meanwhile, when the handwritten signature information of the touch-recognized user is matched with the pattern information of the user's handwritten signature registered in the designated storage area within the allowed error range, the app 130 of the wireless terminal 100 transmits the authenticated user And a step of accessing the facility of the user. The history information generating unit generates history information on the access to the facilities of the user, and encrypts the history information by using a designated encryption method Processing is performed so as to be stored in the designated storage area.

4 is a diagram illustrating a process of registering pattern information on a user's iris according to a second embodiment of the present invention.

In more detail, FIG. 4 illustrates a process of recognizing a user's iris and registering pattern information on the iris of the user in order to increase the number of users to access the facility in a distributed manner. In the technical field of the present invention, It is possible to refer to and / or modify the pattern information registration process in various ways (for example, omitting some steps or changing the order) by referring to FIG. 4, The present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

4, an application 130 of the wireless terminal 100 displays an iris registration interface 400 for registering a user's iris on the touch screen 105 at the initial operation (or before pattern registration) (405) generates pattern information on the user-recognized iris more than a designated number of times through the camera unit 115 based on the iris registration interface.

If the pattern information for the user iris is generated, the app 130 of the wireless terminal 100 registers and stores pattern information for the user iris in a designated storage area (410).

FIG. 5 is a diagram illustrating a process of recognizing an iris of a user who accesses a facility according to a second embodiment of the present invention as an analog recognition method, and authenticating the user in a distributed manner.

5 shows an example in which when the near-field radio signal transmitted through the signal module 195 included in the facility is received and recognized by the app 130 of the user wireless terminal 100 via the near-field wireless unit 110, The application 130 of the wireless terminal 100 recognizes the iris of the user who accesses the facility through the camera unit 115 as an analog recognition method and recognizes the user who accesses the facility from the app 130 of the wireless terminal 100 A user who has ordinary skill in the art will be able to refer to and / or modify the FIG. 5 to determine whether the distributed user authentication process using the analog recognition method It is to be understood that the invention is not limited to the particular embodiments set forth herein, but may be varied in many ways (for example, Only an exemplary method illustrated in surface 5 is not limited that technical feature.

5, an application 130 of a wireless terminal 100 transmits a short-range wireless signal transmitted through a signal module 195 provided in a designated facility through a short-range wireless unit 110 of the wireless terminal 100 (500) and recognizes the signal recognition information including one or more pieces of identification information included in the near field radio signal by reading the received near field radio signal. Preferably, the app 130 of the wireless terminal 100 includes facility identification information that uniquely identifies a facility having the signal module 195 that has transmitted the short-range wireless signal, and a signal module 195), and access identification information that identifies a user's access method or procedure for the facility. In this case, the signal recognition information includes at least one of the location identification information for identifying the location of the facility, On the other hand, the signal recognition information may include, in addition to the identification information, access code information necessary for the user to access the facility identified by the facility identification information and / or access to the facility identified by the facility identification information And access authentication information.

If signal recognition information including one or more identification information is recognized by reading the short distance wireless signal transmitted through the signal module 195 provided in the facility, the app 130 of the wireless terminal 100 transmits the short- (510) an iris recognition interface for recognizing a user's iris through a touch screen (105) of the wireless terminal (100) The iris information of the user is recognized by the analog recognition method through the camera unit 115 of the terminal 100 (515). If the iris information of the user is recognized through the camera unit 115 as an analog recognition method, the app 130 of the wireless terminal 100 can recognize the user's iris (520) a process of authenticating whether the information matches the pattern information of the user iris registered in the designated storage area within an allowable error range.

If the iris information of the recognized user is not matched with the pattern information of the user iris registered in the designated storage area within the allowable error range, the app 130 of the wireless terminal 100 transmits the iris information of the recognized user (525). &Lt; / RTI &gt; If the recognized iris information of the user is matched with the pattern information of the user iris registered in the designated storage area within an allowable error range, the app 130 of the wireless terminal 100 determines whether the position of the authenticated user is And a process of accessing the facility of the user. The history information of the access to the facility is generated, and the information is encrypted with the designated encryption method to be designated To be stored in the storage area.

6 is a diagram illustrating a process of registering pattern information on a fingerprint of a user according to a third embodiment of the present invention.

More specifically, FIG. 6 shows a process of registering pattern information on the fingerprint of the user in order to increase the number of users who access the facility by deciphering the fingerprint of the user, in a distributed manner. It may be possible to refer to and / or modify the FIG. 6 to various embodiments of the pattern information registration process (for example, omitting some steps or changing the order) The present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

6, an application 130 of the wireless terminal 100 displays a fingerprint registration interface 600 for registering a user's fingerprint on the touch screen 105 at the time of initial operation (or before pattern registration) In operation 605, pattern information on a user fingerprint that has been recognized by the fingerprint sensor unit 120 for a predetermined number of times or more is generated based on the fingerprint registration interface.

If the pattern information for the user fingerprint is generated, the application 130 of the wireless terminal 100 registers and stores the pattern information for the user fingerprint in the designated storage area (610).

7 is a diagram illustrating a process of authenticating a user in a distributed manner by recognizing a fingerprint of a user who accesses a facility according to a third embodiment of the present invention as an analog recognition method.

7 shows an example of a case where a short range wireless signal transmitted through a signal module 195 included in a facility is received and recognized by the app 130 of the user wireless terminal 100 via the short range wireless unit 110, The application 130 of the wireless terminal 100 recognizes the fingerprint of the user who accesses the facility through the fingerprint sensor unit 120 as an analog recognition method and accesses the facility from the application 130 of the wireless terminal 100 A user who is a person skilled in the art will be able to refer to and / or modify the FIG. 7 in the distributed user authentication process using the analog recognition method It will be apparent to those skilled in the art that various other embodiments may be devised which do not depart from the spirit and scope of the invention, The technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 7, an application 130 of a wireless terminal 100 transmits a short-range wireless signal transmitted through a signal module 195 provided in a designated facility through a short-range wireless unit 110 of the wireless terminal 100 (700), and recognizes the signal recognition information including one or more pieces of identification information included in the near field radio signal by reading the received near field radio signal. Preferably, the app 130 of the wireless terminal 100 includes facility identification information that uniquely identifies a facility having the signal module 195 that has transmitted the short-range wireless signal, and a signal module 195), and access identification information that identifies a user's access method or procedure for the facility. In this case, the signal recognition information includes at least one of the location identification information for identifying the location of the facility, On the other hand, the signal recognition information may include, in addition to the identification information, access code information necessary for the user to access the facility identified by the facility identification information and / or access to the facility identified by the facility identification information And access authentication information.

If signal recognition information including one or more identification information is recognized by reading the short distance wireless signal transmitted through the signal module 195 provided in the facility, the app 130 of the wireless terminal 100 transmits the short- (710) a fingerprint recognition interface for recognizing a fingerprint of a user through the touch screen 105 of the wireless terminal 100, and displays the fingerprint recognition interface on the wireless terminal 100 based on the fingerprint recognition interface displayed on the touch screen 105 of the wireless terminal 100 The fingerprint information of the user is recognized by the analog recognition method through the fingerprint sensor unit 120 of the terminal 100 (715). If the fingerprint information of the user is recognized through the fingerprint sensor unit 120 as an analog recognition method, the app 130 of the wireless terminal 100 can recognize the user recognized by the analog recognition method through the fingerprint sensor unit 120 The fingerprint information of the user fingerprint matches the pattern information of the user fingerprint registered in the designated storage area within an allowable error range (720).

If the fingerprint information of the recognized user is not matched with the pattern information of the user fingerprint registered in the designated storage area within the allowable error range, the app 130 of the wireless terminal 100 transmits the fingerprint information of the recognized user (725). &Lt; / RTI &gt; If the fingerprint information of the recognized user is matched with the pattern information of the user fingerprint registered in the designated storage area within an allowable error range, the app 130 of the wireless terminal 100 determines whether the position of the authenticated user is And a process of accessing the facility of the user. The history information of the access to the facility is generated, and the information is encrypted with the designated encryption method to be designated To be stored in the storage area.

FIG. 8 is a diagram illustrating a process of matching and authenticating a location of a user authenticated by an analog recognition method and a location of a facility according to an embodiment of the present invention.

In more detail, FIG. 8 compares location information of a wireless terminal 100 corresponding to a location of a user authenticated by at least one analog recognition method and facility location information, and determines whether the location information of the wireless terminal 100 is stored in the facility location Information and an allowable range, it is possible to have a person skilled in the art to refer to and / or modify the FIG. 8 to perform various methods for the location authentication process (For example, an operation method in which some steps are omitted or the order is changed). However, the present invention includes all of the above-described embodiments, and the technical features Is not limited.

Referring to FIG. 8, the app 130 of the wireless terminal 100 identifies (800) the location information of the wireless terminal 100 that has authenticated the user through at least one analog recognition method, And reads out the local wireless signal received through the short-range wireless unit 110 of the local area wireless terminal 110 and confirms the facility location information using the information included in the recognized signal recognition information (805). When the location information of the wireless terminal 100 and the facility location information are confirmed, the location information of the wireless terminal 100 authenticating the user is stored in the app 130 of the wireless terminal 100, (810). &Lt; / RTI &gt;

If the location information is not matched, the app 130 of the wireless terminal 100 displays a location authentication error (815). Meanwhile, when the location information is matched and authenticated, the app 130 of the wireless terminal 100 may perform a designated access procedure to access the authorized user to the facility (815) Generates a history information for the user, and encrypts the history information using the designated encryption method and stores the encrypted information in a designated storage area.

FIG. 9 is a diagram illustrating a process of encrypting and storing history information on a facility access of a user authenticated by an analog recognition method according to a first embodiment of the present invention.

More specifically, FIG. 9 illustrates a method of separating and hashing n (1? N <N) pieces of information among N (N? 2) pieces of information included in the history information on access to facilities of a user authenticated by an analog recognition method The history information is block-chained and stored in an information storage area distributed on a network. Those skilled in the art will be able to refer to and / or modify the FIG. 9 It should be understood that various ways of performing the cryptographic storage of the history information (e.g., omitting some steps or changing the order) may be inferred, but the present invention includes all of the above- The technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 9, the application 130 of the wireless terminal 100 may include at least one identification information included in the signal recognition information based on the authentication result including the result of authenticating the user through at least one analog recognition method (N &gt; = 2) pieces of identification information among the identification information stored in the designated storage area of the user wireless terminal 100 and the authentication-related information confirmed in the process of authenticating the user through the analog wireless method through the user wireless terminal 100 And generates history information on access to the facility including the information (900).

When the history information on access to the facilities of the user is generated, the app 130 of the wireless terminal 100 separates n (1? N <N) pieces of information to be hash out of N pieces of information included in the history information (915) encrypting the encrypted information using a hash algorithm specified for the n pieces of separated information, encrypting the decrypted information using a hash algorithm specified in step (910), blocking the encrypted information to form a chain (915) (1? M? N, N = n? M) information included in the history information is stored in an information storage area distributed on the network (920).

FIG. 10 is a diagram illustrating a process of encrypting and storing history information on a facility access of a user authenticated by an analog recognition method according to a second embodiment of the present invention.

In more detail, FIG. 10 illustrates a method of block-chain-encrypting the history information in a manner of hashing N (N? 2) pieces of information included in history information on a facility access of a user authenticated by an analog recognition method, The present invention is not limited to the above-described embodiments, and various changes and modifications may be made without departing from the scope of the present invention. For example, some of the steps may be omitted or the order may be changed. However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention, It is not limited.

Referring to FIG. 10, the app 130 of the wireless terminal 100 may include at least one identification information included in the signal recognition information based on an authentication result including a result of authenticating a user through at least one analog recognition method (N &gt; = 2) pieces of identification information among the identification information stored in the designated storage area of the user wireless terminal 100 and the authentication-related information confirmed in the process of authenticating the user through the analog wireless method through the user wireless terminal 100 And generates history information on access to the facility including the information (1000).

When the user's facility information access history is generated, the application 130 of the wireless terminal 100 applies the hash algorithm specified in the N information included in the history information to encrypt 1005, (1? M? N) pieces of information included in the encrypted information and the history information are distributed on a network (1015).

100: wireless terminal 105: touch screen
110: short range wireless unit 115: camera unit
120: fingerprint sensor unit 125: position positioning unit
130: App 135: Pattern registration part
140: signal recognition unit 145: interface display unit
150: recognition processing unit 155:
160: Position confirming unit 165:
170 facility access processing unit 175 history generating unit
180: Encryption storage unit 185: Operation server
190: Facility device 195: Signal module

Claims (25)

A method of executing via an app installed in a user wireless terminal having a local wireless unit transmitting and receiving a local wireless signal of a specified standard,
The application receives and reads a short range wireless signal transmitted through a signal module included in a facility designated through the short range wireless unit of the wireless terminal and recognizes signal identification information including one or more pieces of identification information included in the short range wireless signal A first step;
A second step of the user performing a specified user authentication procedure using the body of the user in association with the touch screen of the wireless terminal;
Wherein the identification information includes at least one identification information included in the signal recognition information recognized through the short range wireless signal and a designated storage location of the user wireless terminal when the authentication result including the result of authenticating the user through the analog recognition method is confirmed, (N &gt; = 2) of at least one identification information stored in an area and authentication related information confirmed in the process of authenticating a user using the analog recognition method, Step 3; And
And a fourth step of the application encrypting the generated history information with a specified encryption method and storing the generated history information in a designated storage area.
2. The method of claim 1,
And a Bluetooth-based wireless signal of a Bluetoth standard.
2. The apparatus according to claim 1,
And a facility identification information for uniquely identifying a facility having the signal module transmitting the short-range wireless signal.
4. The method according to claim 1 or 3,
And a location identification information for identifying a location of a facility having the signal module transmitting the short-range wireless signal.
2. The apparatus according to claim 1, wherein the at least one identification information included in the signal recognition information comprises:
The code information type of the specified code scheme,
The address information type of the specified address scheme,
And a form of a combination of code information and address information. &Lt; RTI ID = 0.0 &gt; 11. &lt; / RTI &gt;
2. The method according to claim 1,
A method for controlling access to a distributed facility using a short distance wireless signal, characterized in that it is not a digital input method for inputting information stored by a user.
2. The method according to claim 1,
And a method of recognizing physical quantities continuously generated by the user's body and authenticating whether or not they match within a tolerance range stochastically with previously registered pattern information. .
8. The method according to claim 1 or 7,
A method of touch recognition and authentication of a user's handwritten signature based on a handwriting signature recognition interface displayed on a touch screen of the wireless terminal,
A method of recognizing and authenticating a user's iris through a camera unit of the wireless terminal based on an iris recognition interface displayed on a touch screen of the wireless terminal,
And a method of recognizing and authenticating a user's fingerprint through a fingerprint sensor unit of the wireless terminal based on a fingerprint recognition interface displayed on a touch screen of the wireless terminal. Access control method.
The method according to claim 1,
Displaying a handwritten signature registration interface for the user to touch the handwritten signature of the user through the touch screen of the wireless terminal and register the handwritten signature in a designated storage area; And
Performing a procedure for the application to generate pattern information on the user's handwritten signature that has been recognized more than the designated number of times over the touch screen of the wireless terminal based on the handwritten signature registration interface and to register the pattern information in the designated storage area Wherein the distributed radio access control method comprises the steps of:
10. The method according to claim 1 or 9,
When recognizing the signal recognition information included in the near-field wireless signal,
Further comprising displaying the handwritten signature recognition interface for allowing the application to touch and recognize the user's handwritten signature through the touch screen of the wireless terminal.
10. The method according to any one of claims 1 to 9,
The handwritten signature information of the user who is touch-recognized through the touch screen of the wireless terminal on the basis of the handwritten signature recognition interface displayed on the touch screen of the wireless terminal is stored in the pattern information of the user handwritten signature registered in the designated storage area, The method comprising the steps of: (a) receiving a short range wireless signal;
The method according to claim 1,
Displaying an iris registration interface for the application to recognize a user's iris through a touch screen of the wireless terminal and register the iris in a designated storage area; And
And generating a pattern information for the iris of the user recognized by the app more than a predetermined number of times through the camera unit of the wireless terminal based on the iris registration interface and registering the pattern information in the designated storage area And a method for controlling access to a distributed facility using a short distance wireless signal.
13. The method as claimed in claim 1 or 12,
When recognizing the signal recognition information included in the near-field wireless signal,
Further comprising displaying the iris recognition interface for allowing the app to recognize a user's iris through a touch screen of the wireless terminal.
13. The method according to claim 1 or 12,
The iris information of the user recognized through the camera unit of the wireless terminal is matched with the pattern information of the user iris registered in the designated storage area based on the iris recognition interface displayed on the touch screen of the wireless terminal Wherein the method comprises the steps of: (a) providing a short range radio signal;
The method according to claim 1,
Displaying a fingerprint registration interface for the user to recognize the fingerprint of the user on the touch screen of the wireless terminal and register the fingerprint in a designated storage area; And
And generating a pattern information for a user fingerprint recognized by the app more than a designated number of times through the fingerprint sensor unit of the wireless terminal based on the fingerprint registration interface and registering the pattern information in a designated storage area And a method for controlling access to a distributed facility using a short distance wireless signal.
16. The method according to claim 1 or 15,
When recognizing the signal recognition information included in the near-field wireless signal,
Further comprising displaying a fingerprint recognition interface for allowing the application to recognize a fingerprint of a user through a touch screen of the mobile terminal.
16. The method according to claim 1 or 15,
Wherein the fingerprint information of the user recognized through the fingerprint sensor unit of the wireless terminal matches with the pattern information of the user fingerprint registered in the designated storage area based on the fingerprint recognition interface displayed on the touch screen of the wireless terminal The method comprising the steps of: (a) providing a short range wireless signal;
2. The method according to claim 1,
The method of claim 1, wherein if the user is authenticated through at least one analog identification method, the app verifies the location information of the wireless terminal that authenticated the user via the analog identification method, A location confirmation step of confirming facility location information using information; And
And a location authentication step of authenticating whether the location information of the wireless terminal that has authenticated the user through the analog recognition method matches the location information of the facility within the allowable range, Access Control Method of Distributed Facility Using.
19. The method of claim 18,
And checking the location information of the wireless terminal located through the location locator of the wireless terminal when the app authenticates the user using the analog recognition method. Control method.
19. The method of claim 18,
And the location information of the facility registered in the operation server through the at least one identification information included in the signal recognition information, and checking the location information of the facility. Access control method.
19. The method of claim 18,
When the location identification information of the facility is included in the signal recognition information recognized through the short-range wireless signal,
And reading the location identification information included in the signal recognition information by the application to confirm the location information of the facility.
2. The method according to claim 1,
The at least one identification information included in the signal recognition information, at least one identification information stored in a designated storage area of the user wireless terminal, and at least one authentication information among the authentication related information confirmed in the process of authenticating the user using the analog recognition method, And generating history information including at least one piece of information on the access point.
The information processing apparatus according to claim 1 or 22,
The handwritten signature information, which is recognized by the analog recognition method through the touch screen,
The iris information recognized by the analog recognition method through the camera unit for the user authentication,
The fingerprint information recognized by the analog recognition method through the fingerprint sensor unit for the user authentication,
Position information at a time point when the user is authenticated using the analog recognition method,
And time information of a time when the user is authenticated using the analog recognition method.
The method as claimed in claim 1 or 22,
Separating n (1? N <N) pieces of information to be hashed from the N pieces of information included in the history information by the app;
Encrypting the encrypted information using a hash algorithm designated by the appended n pieces of information, and encrypting the decrypted information with a block-chain cryptosystem that blocks the encrypted information to form a chain;
Processing the information to be stored in an information storage area distributed on the network by the application, wherein m (1? M? N, N = n? M) pieces of information included in the encrypted information and the history information are stored And a method for controlling access to a distributed facility using a short distance wireless signal.
The method as claimed in claim 1 or 22,
Encrypting the application by applying a hash algorithm specified for N pieces of information included in the history information, and encrypting the encrypted information using a block-chain encryption technique for blocking the encrypted information to form a chain;
And the m (1? M? N) pieces of information included in the encrypted information and the history information are stored in an information storage area distributed on the network. Distributed Facility Access Control Method Using Signals.

Images