KR20200086151A - Doorlock operation system and method for verifying entrance thereof - Google Patents

Abstract

According to the present invention, an access verification method in a door lock operating system includes the steps of: receiving an access request from a user terminal; generating an encrypted unique key in response to the access request; transmitting a generated unique key to the user terminal; scanning as the instant authorization code generated based on the unique key is output on the user terminal; and releasing a door lock based on a scan result.

Description

DOORLOCK OPERATION SYSTEM AND METHOD FOR VERIFYING ENTRANCE THEREOF}

The present invention relates to a door lock operating system and a method for verifying access, and more particularly, to a system and method for verifying access using an instant message generated one time.

In general, access devices located in a home or office are controlled by using various methods such as a user's fingerprint, password, and key.

On the other hand, the method of controlling the locking of the access device using a physical key has the inconvenience that the user must have the key.

In order to solve this inconvenience, a key using an RFID method was used, but in the case of losing the RFID key, that method also had the inconvenience of re-registering all existing keys.

In addition, it was impossible to generate a key in real time, and there was an inconvenience that must be delivered in writing.

In the case of the method of inputting the password that is currently used most often, when passing the password to a third party, there was a hassle of changing the password later, and there is no security problem because information about who entered the password does not remain. have.

An embodiment of the present invention provides a door lock operating system and a method for verifying access to a door lock that can expect high security by generating and providing only a temporary access key to a user.

However, the technical problem to be achieved by the present embodiment is not limited to the technical problem as described above, and other technical problems may exist.

As a technical means for achieving the above-described technical problem, the access verification method in the door lock operating system according to the first aspect of the present invention comprises: receiving an access request from a user terminal; Generating an encrypted unique key in response to the access request; Transmitting the generated unique key to the user terminal; Scanning as the instant approval code generated based on the unique key is output on the user terminal; And releasing the door lock based on the scan result.

In one embodiment, the step of receiving an access request from the user terminal receives the access request including an access ID dynamically mapped to one or more information of an access date, time, number, and user information from the user terminal. can do.

In one embodiment, the step of generating an encrypted unique key in response to the access request may encrypt one or more information and access ID received from the user terminal with a unique key.

In an embodiment, the step of generating an encrypted unique key in response to the access request is to map the one or more pieces of information and access IDs into length data and content information so as to be distinguishable by length information and content information. The encrypted data can be encrypted with a unique key.

In an embodiment, the numeric data included in the mapped data may be composed of 36 digits.

In an embodiment, releasing the door lock based on the scan result includes: converting the instant approval code to a character string; Decrypting with the unique key based on the converted character string; And checking the one or more information and the access ID based on the decrypted unique key to unlock the door lock.

In an embodiment, the step of releasing the door lock based on the scan result may include at least one of the access ID and the access date, time, number, and user information included in the instant approval code to the generated instant approval code. The door lock may be released based on whether it is consistent with the included information.

The access verification method according to the present invention may further include the step of revoking the authority of the access ID when one or more of the available access dates, times, and times is exceeded after the door lock is released.

In addition, the door lock operating system according to the second aspect of the present invention includes a communication module for transmitting and receiving data to and from a user terminal, a memory storing a program for verifying access based on an instant approval code, and a processor for executing a program stored in the memory. Includes. At this time, as the processor executes the program, upon receiving an access request from the user terminal, the encrypted unique key is generated and transmitted to the user terminal through the communication module, and the instant approval generated based on the unique key is generated. As the code is output on the user terminal, the instant approval code is scanned, and the door lock is released based on the scan result.

According to any one of the above-described problem solving means of the present invention, it is possible to maintain security and add convenience by issuing keys that operate for a specific time and number of times to outsiders.

In addition, it has an advantage that it can be applied only through software update to a legacy wall pad door lock system without an existing RF function.

In addition, unlike the RFID method, it is possible to issue a pass in real time through a smartphone, and it is easy to transmit to a user, and it is possible to prevent a security accident due to exposure of the corresponding key.

1 is a view schematically illustrating a door lock operating system according to an embodiment of the present invention.
2 is a block diagram of a door lock operating system according to an embodiment of the present invention.
3 is a flowchart of an access verification method according to an embodiment of the present invention.
4 is a flowchart of a process for generating a unique key according to an embodiment of the present invention.
5 is a flowchart illustrating a process of releasing the door lock based on the scan result.
6 is a diagram for explaining an example in which an instant approval code is generated.
7 is a diagram for explaining an example in which the instant approval code is decrypted.
8 is a diagram for explaining another example in which an instant approval code is generated.
9 is a diagram for explaining numeric data on an instant approval code.
10 is an exemplary diagram of an instant authorization code.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art to which the present invention pertains may easily practice. However, the present invention can be implemented in many different forms and is not limited to the embodiments described herein. In addition, parts not related to the description are omitted in the drawings to clearly describe the present invention.

When a certain part of the specification "includes" a certain component, it means that other components may be further included rather than excluding other components, unless otherwise specified.

Hereinafter, a door lock operating system 100 according to an embodiment of the present invention will be described with reference to FIGS. 1 to 2.

1 is a view schematically illustrating a door lock operating system 100 according to an embodiment of the present invention. 2 is a block diagram of a door lock operating system 100 according to an embodiment of the present invention.

The door lock operating system 100 according to an embodiment of the present invention includes a wall pad 110 and a door lock 120.

One embodiment of the present invention can generate a one-time and random type instant approval code and control the door lock 120 by using it.

For example, you can issue and send an instant authorization code that works only between AM 6:00 and 7:00 to the office cleaner.

Also, you can provide a courier driver with a lobby instant approval code that works only once between the scheduled arrival time of PM 4:00 and PM 5:00, and the entrance instant approval code that works only for the same day for parents visiting today when you are in the company. Can provide.

In one embodiment, the door lock operating system 100 is built into one of the wall pad 110 and the door lock 120 or is distributed and disposed on the wall pad 110 and the door lock 120, but its function can be performed as an integral part. It can be implemented in various forms according to the convenience of the practitioner.

Meanwhile, each component shown in FIG. 1 may be connected through a network. The network refers to a connection structure capable of exchanging information between nodes such as terminals and servers, and examples of such a network include a 3rd Generation Partnership Project (3GPP) network and a Long Term Evolution (LTE) network. , World Interoperability for Microwave Access (WIMAX) Network, Internet, Local Area Network (LAN), Wireless Local Area Network (LAN), Wide Area Network (WAN), Personal Area Network (PAN), Bluetooth (Bluetooth) Networks, satellite broadcasting networks, analog broadcasting networks, DMB (Digital Multimedia Broadcasting) networks, WiFi, and the like.

The user terminal 200 is a wireless communication device that guarantees portability and mobility, that is, a Personal Communication System (PCS), Global System for Mobile communications (GSM), Personal Digital Cellular (PDC), Personal Handyphone System (PHS), PDA (Personal) All kinds of handhelds such as Digital Assistant (IMT), International Mobile Telecommunication (IMT)-2000, Code Division Multiple Access (CDMA)-2000, W-Code Division Multiple Access (W-CDMA), Wireless Broadband Internet (Wibro) terminals, etc. Handheld)-based wireless communication device.

In particular, the user terminal 200 is an intelligent terminal that adds computer support functions such as Internet communication and information retrieval to a portable terminal, and is capable of installing and executing a plurality of application programs (ie, applications) desired by a user. smart phone), a pad, a smart watch, a wearable terminal, and other mobile communication terminals.

Referring to FIG. 2, the door lock operating system 100 may include a communication module 101, a memory 102 and a processor 103.

The communication module 101 transmits and receives data to and from the user terminal 200, and can also transmit and receive data to and from the wall pad 110 and the door lock 120.

The communication module 101 may include both a wired communication module and a wireless communication module. The wired communication module may be implemented as a power line communication device, a telephone line communication device, a cable home (MoCA), Ethernet, IEEE1294, an integrated wired home network, and an RS-485 control device. In addition, the wireless communication module may be implemented with a wireless LAN (WLAN), Bluetooth, HDR WPAN, UWB, ZigBee, Impulse Radio, 60GHz WPAN, Binary-CDMA, wireless USB technology and wireless HDMI technology.

In the memory 102, a program for verifying access based on the instant approval code is stored, and the processor 103 executes the program stored in the memory 102. Here, the memory 102 refers to a non-volatile storage device and a volatile storage device that keeps stored information even when power is not supplied.

For example, the memory 102 is a compact flash (CF) card, a secure digital (SD) card, a memory stick, a solid-state drive (SSD), and a micro SD NAND flash memory such as cards, magnetic computer storage devices such as hard disk drives (HDDs), and optical disc drives such as CD-ROMs, DVD-ROMs, and the like. Can.

When the processor 103 receives an access request from the user terminal 200 according to executing the program, the processor 103 generates an encrypted unique key and transmits it to the user terminal 200 through the communication module 101.

Then, as the instant approval code based on the unique key is generated and output on the user terminal 200 on the user terminal 200, the instant approval code is scanned, and the door lock 120 is released based on the scan result.

In this case, the generated instant approval code may be, for example, a QR code.

On the other hand, the door lock operating system 100 may be installed on the door lock 120 or a door camera installed at a position distinct from the door lock 120 to scan an instant approval code, and a display is installed on the wall pad 110 to install the instant An authorization code or corresponding information may be output.

For reference, the components shown in FIGS. 1 and 2 according to an embodiment of the present invention may be implemented in software or in a hardware form such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). Roles can be played.

However,'components' are not limited to software or hardware, and each component may be configured to be in an addressable storage medium or may be configured to reproduce one or more processors.

Thus, as an example, a component is a component, such as software components, object-oriented software components, class components, and task components, processes, functions, attributes, procedures, subs It includes routines, segments of program code, drivers, firmware, microcode, circuitry, data, database, data structures, tables, arrays and variables.

Components and functions provided within those components may be combined into a smaller number of components or further separated into additional components.

Hereinafter, an access verification method performed in the door lock operating system 100 according to an embodiment of the present invention will be described in more detail with reference to FIGS. 3 to 10.

3 is a flowchart of an access verification method according to an embodiment of the present invention.

The access verification method in the door lock operating system 100 according to an embodiment of the present invention first receives an access request from the user terminal 200 (S110).

In response to the request, the door lock operating system 100 generates an encrypted unique key (S120), and transmits the generated unique key to the user terminal 200 (S130).

Next, as the instant approval code generated based on the unique key is output on the user terminal 200, it is scanned (S140), and the door lock 120 is released based on the scan result (150).

4 is a flowchart of a process for generating a unique key according to an embodiment of the present invention.

In one embodiment, the user enters one or more of the access date, time, number, and user information through the user terminal 200 and then clicks the button for generating an instant approval code.

Accordingly, the user terminal 200 dynamically maps the one or more information and the access ID to transmit the access request information to the door lock operating system 100. At this time, the access ID may be a UDID (S210).

Upon receiving this, the door lock operating system 100 first checks whether the corresponding information is received from the user terminal 200 having valid authority (S220), and then generates a unique key and a UDID table based on the UDID and UWID. (S230).

At this time, the door lock operating system 100 may encrypt one or more information and UDID received from the user terminal 200 with a unique key.

After the unique key is generated as described above, the door lock operating system 100 delivers the unique key to the user terminal 200 (S240), and the unique key is stored on the user terminal 200 (S250).

Next, the user terminal 200 generates an instant approval code based on the unique key (S260) and stores it (S270).

5 is a flowchart for explaining a process of releasing the door lock 120 based on the scan result.

First, the user calls the door camera so that the instant approval code can be scanned, and then outputs the instant approval code on the user terminal 200 to be scanned (S310).

The door lock operating system 100 receives the scanned instant approval code (S320), and converts the instant approval code to character data (S330).

Then, based on the converted string data, it is decrypted with a unique key, through which the UDID authority is checked, the allowed date and time are checked, and it is checked whether the open count has been exceeded (S340 to S360).

If the result of the check is not a valid UDID, date, time and count, the error and history are recorded and the lock state of the door lock 120 is maintained (S365).

On the other hand, if the result of the check is valid, the door lock signal is sent to control the door lock 120 to be released (S370).

On the other hand, in one embodiment of the present invention, when the door lock 120 is released or the door lock 120 is kept in a locked state based on invalid information, one or more of access dates, times, and times are exceeded. If you do, you can revoke the authority of the access ID.

Accordingly, the administrator does not need to individually manage the ID of the user to whom the access authority has been granted, and management can be maintained even in the first time.

6 is a diagram for explaining an example in which an instant approval code is generated.

For example, suppose that you generate an instant approval code that can be used three times in total between 7:30 am and 6:30 pm until December 31, 2018.

In this case, as shown in (a) of FIG. 6, first, it is generated as one piece of data based on input data including version information, UDID, QR code key, last available date, available time information, and available count information.

Then, as shown in FIG. 6(b), the data generated in FIG. 6(a) is encrypted using the unique key. At this time, the encryption may use the AES256 bidirectional algorithm.

As a result of the encryption, an instant approval code in the form of a QR code as shown in FIG. 6(c) is generated.

7 is a diagram for explaining an example in which the instant approval code is decrypted.

When the QR code is scanned and transmitted through the door camera, the QR code is converted into a string and decrypted with a unique key.

Then, access ID information, time information, date information, and the like are checked from the unique key to perform door lock 120 release/lock control.

8 is a diagram for explaining another example in which an instant approval code is generated. 9 is a diagram for explaining numeric data on an instant approval code. 10 is an exemplary diagram of an instant authorization code.

When an instant approval code such as a QR code is scanned with a door camera, the recognition rate varies depending on the scanning environment, the number of pixels of the camera, or the size of the user terminal 200, and eventually a smooth scan may not occur. .

Due to the nature of the QR code, a larger density QR code image is required to include more data. However, since the portable-based user terminal 200 has a limited size, it becomes difficult to recognize a compact QR code from a certain moment when the data grows.

Accordingly, in order to operate smoothly in almost any environment in response to the size of the user terminal 200 having the limitation and the number of pixels of the door camera, an instant approval code in the simplest form is necessary, and for this, the size of the data is required. It should be reduced as much as possible.

That is, it is necessary to simplify the QR code image to be scanned as much as possible for smooth use.

To this end, according to an embodiment of the present invention, in generating an encrypted unique key, one or more information and access IDs are arranged to be distinguishable by length information and content information, respectively, and mapped to one data, and the mapped data is used as a unique key. Can be encrypted.

That is, as shown in (a) and (c) of FIG. 8, one line is composed of 1-byte data indicating length information of data and internal information corresponding to the length information.

The data completed in this form is shown in FIG. 8(b). At this time, FIG. 8(b) means ‘a unique key that operates from December 5, 2018 and can operate only three times from 6 am to 1 pm’.

In addition, according to an embodiment of the present invention, in the case of numeric data included in the mapped data as shown in FIG. 9, the size of the data may be reduced by using a 36 digit number.

Through this method, an embodiment of the present invention may generate the first 88-byte based QR code including the same data as the 44-byte QR code as shown in FIG. 10.

That is, one embodiment of the present invention has the advantage of greatly improving the recognition rate by simplifying the QR code using string compression.

In the above description, steps S110 to S370 may be further divided into additional steps or combined into fewer steps, according to an embodiment of the present invention. In addition, some steps may be omitted if necessary, and the order between the steps may be changed. In addition, even if omitted, the contents already described with respect to the door lock operating system 100 in FIGS. 1 to 2 also apply to the access verification methods of FIGS. 3 to 10.

Meanwhile, an embodiment of the present invention may be implemented in the form of a computer program stored in a medium executed by a computer or a recording medium including instructions executable by a computer. Computer readable media can be any available media that can be accessed by a computer, and includes both volatile and nonvolatile media, removable and non-removable media. In addition, computer readable media may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism, and includes any information delivery media.

Although the methods and systems of the present invention have been described in connection with specific embodiments, some or all of their components or operations may be implemented using a computer system having a general purpose hardware architecture.

The above description of the present invention is for illustration only, and those skilled in the art to which the present invention pertains can understand that the present invention can be easily modified into other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive. For example, each component described as a single type may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined form.

The scope of the present invention is indicated by the following claims rather than the above detailed description, and it should be interpreted that all changes or modified forms derived from the meaning and scope of the claims and equivalent concepts thereof are included in the scope of the present invention. do.

100: door lock operating system
101: communication module
102: memory
103: processor
200: user terminal?

Claims (9)

In the access verification method in the door lock operating system,
Receiving an access request from a user terminal;
Generating an encrypted unique key in response to the access request;
Transmitting the generated unique key to the user terminal;
Scanning as the instant approval code generated based on the unique key is output on the user terminal; And
And releasing the door lock based on the scan result. According to claim 1,
The step of receiving an access request from the user terminal,
The access verification method comprising receiving the access request including an access ID dynamically mapped to one or more information of an access date, time, number, and user information from the user terminal. According to claim 2,
Generating an encrypted unique key in response to the access request,
Access verification method for encrypting one or more information and access ID received from the user terminal with a unique key. The method of claim 3,
Generating an encrypted unique key in response to the access request,
A method of verifying access, wherein the one or more information and the access ID are arranged to be distinguishable by length information and content information, respectively, and mapped to one data and the mapped data is encrypted with a unique key. The method of claim 4,
In the case of numeric data included in the mapped data, access verification method consisting of 36 digits. The method of claim 3,
The step of releasing the door lock based on the scan result,
Converting the instant approval code to a string;
Decrypting with the unique key based on the converted character string; And
And unlocking the door lock by checking the one or more information and the access ID based on the decrypted unique key. According to claim 2,
The step of releasing the door lock based on the scan result,
Access to release the door lock based on whether at least one of the access ID and access date, time, number of times, and user information included in the instant authorization code matches information included in the generated instant authorization code. Verification method. According to claim 1,
After the step of the door lock is released, access verification method further comprising the step of revoking the authority of the access ID if one or more of the access date, time and number of times. In the door lock operating system,
Communication module that transmits and receives data to and from the user terminal,
Memory that stores programs for verifying access based on the instant approval code, and
It includes a processor for executing a program stored in the memory,
As the processor executes the program, it generates an encrypted unique key upon receiving an access request from the user terminal and transmits it to the user terminal through the communication module.
A door lock operating system that scans the instant approval code as the instant approval code generated based on the unique key is output on the user terminal, and releases the door lock based on the scan result.

Images