KR20200102751A - Terminal certification method using heterogeneous communication type and vehicle terminal performing certification using the same - Google Patents

Abstract

The present invention relates to a terminal authentication technology. According to an embodiment of the present invention, a terminal authentication method using a heterogeneous communication method capable of enhancing security without an additional configuration comprises the steps of: searching, by a vehicle terminal, for a portable terminal according to a first communication method and performing authentication on the searched portable terminal; when authentication is completed, performing, by the vehicle terminal, authentication for the portable terminal according to a second communication method; setting, by the vehicle terminal, a supportable function according to the authentication result according to the second communication method; and when a request from the portable terminal corresponds to the supportable function, causing, by the vehicle terminal, a vehicle operation according to the request to be performed.

Description

Terminal certification method using heterogeneous communication type and vehicle terminal performing certification using the same}

The present invention relates to a terminal authentication technology, and more particularly, to a terminal authentication method using a heterogeneous communication method and a vehicle terminal for performing authentication using the same.

Authentication between the vehicle terminal and the portable terminal is performed through authentication performed in the process of pairing the portable terminal in the vehicle terminal and the authentication performed in the process of pairing the vehicle terminal in the portable terminal.

The authentication between terminals according to the conventional method is performed using a basic PIN code of Bluetooth, but there is a problem that security is weak because a vehicle terminal and a portable terminal are paired based on authentication by a simple universal PIN code.

Republic of Korea Patent Publication No. 10-1786177 (registered on Oct. 10, 2017) (Prior Art 1) proposes server interlocking to prevent hacking through Bluetooth by unauthorized devices. As this mobile phone requires interworking with an authentication server through a modem, additional costs are incurred, and authentication is difficult for a terminal without a modem.

Republic of Korea Patent Publication No. 10-1763747 (registered on July 26, 2017) (Prior Art 2) proposes a method of converting authentication information into an acoustic signal. According to the prior art 2, sound in a vehicle sound noise environment Authentication through signals has a disadvantage in that the possibility of errors is high, and there is a problem in that a separate authentication environment must be configured for Bluetooth authentication.

Accordingly, the present invention has been proposed to solve the problems of the prior art as described above, and an object of the present invention is to perform authentication for a terminal using a heterogeneous communication method, and control authority for a vehicle according to the authentication result. By limiting, it is intended to provide a terminal authentication method using a heterogeneous communication method that can enhance security without an additional configuration, and a vehicle terminal that performs authentication using the same.

The technical problem of the present invention is not limited to the matters mentioned above, and from the following description, those of ordinary skill in the technical field to which the present invention belongs can clearly understand other problems intended by the present invention. will be.

In the terminal authentication method using a heterogeneous communication method according to an embodiment of the present invention to achieve the above object, a vehicle terminal searches for a mobile terminal according to a first communication method and performs authentication on the searched mobile terminal. step; When authentication is completed, performing, by the vehicle terminal, authentication for the portable terminal according to a second communication method; Setting, by the vehicle terminal, a supportable function according to an authentication result according to the second communication method; And if the request from the portable terminal corresponds to the supportable function, causing the vehicle terminal to perform a vehicle operation according to the request.

When the first communication method is a BT (BlueTooth) communication method, the second communication method may be a WiFi communication method, and when the first communication method is a WiFi communication method, the second communication method may be a BT communication method. .

The step of setting includes setting a function supported when authentication is successful through the first and second communication methods as the supportable function when authentication according to the second communication method is successful.

The setting may include setting a function supported when authentication is successful through the first communication method as the supportable function when authentication according to the second communication method fails.

The method includes, when the request from the portable terminal does not correspond to the supportable function, notifying that a security violation has occurred to the portable terminal.

A vehicle terminal performing authentication using a heterogeneous communication method according to a preferred embodiment of the present invention includes: a first communication module for communicating through a first communication method; A second communication module for communicating through a second communication method; And searching for a portable terminal according to the first communication method, performing authentication for the searched portable terminal, and then performing authentication for the portable terminal according to the second communication method. And an access point configured to set a supportable function and, if a request from the portable terminal corresponds to the supportable function, to perform a vehicle operation according to the request.

When the first communication module is a BT communication module that communicates with BT (BlueTooth), the second communication module is a WiFi communication module that communicates with WiFi, and when the first communication module is a WiFi communication module, the second communication module is It may be a BT communication module.

The access point may include an authentication module that authenticates the mobile terminal according to the first communication method and the second communication method; And setting the supportable function for the portable terminal according to the authentication result by the authentication module, and performing a vehicle operation according to the request when the request from the portable terminal corresponds to the supportable function. Includes modules.

The processing module sets a supportable function when authentication according to the second communication method fails so as to be included within a category of a supportable function when authentication according to the second communication method is successful.

When the request from the portable terminal does not correspond to the supportable function, the processing module may notify the occurrence of a security violation to the portable terminal.

When the terminal authentication method according to the preferred embodiment of the present invention is used, since the mobile terminal can be authenticated through a heterogeneous communication method, security in case the mobile terminal accesses the vehicle terminal through redundant authentication. Can strengthen.

In addition, by setting the control authority in the case of authentication by only one communication method and the control authority in case of authentication by both heterogeneous communication methods differently, it is possible to enhance security while allowing access to the mobile terminal. .

In addition, when an access beyond the scope of authentication is made, it is notified to the portable terminal, and in some cases, the power of the communication module is turned off to prevent hacking attempts.

1 is a diagram showing the configuration of an example of a vehicle terminal performing authentication using a terminal authentication method according to a preferred embodiment of the present invention.
2 is a view for explaining a process in which a vehicle terminal authenticates a portable terminal according to an exemplary embodiment of the present invention.

For the embodiments of the present invention disclosed in the text, specific structural or functional descriptions have been exemplified for the purpose of describing the embodiments of the present invention only, and the embodiments of the present invention may be implemented in various forms. It should not be construed as being limited to the described embodiments.

In the present invention, various modifications may be made and various forms may be applied, and specific embodiments will be illustrated in the drawings and described in detail in the text. However, this is not intended to limit the present invention to a specific form disclosed, it should be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention.

Terms such as first and second may be used to describe various components, but the components should not be limited by the terms. These terms are used only for the purpose of distinguishing one component from another component. For example, without departing from the scope of the present invention, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element.

When a component is referred to as being “connected” or “connected” to another component, it is understood that it may be directly connected or connected to the other component, but other components may exist in the middle. Should be. On the other hand, when a component is referred to as being “directly connected” or “directly connected” to another component, it should be understood that there is no other component in the middle. Other expressions that describe the relationship between components, such as “between” and “just between” or “adjacent to” and “directly adjacent to” should be interpreted as well.

The terms used in the present application are used only to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In the present application, terms such as “comprise” or “have” are intended to designate the existence of disclosed features, numbers, steps, actions, components, parts, or a combination thereof, but one or more other features or numbers, It is to be understood that the presence or addition of steps, actions, components, parts, or combinations thereof, does not preclude the possibility of preliminary exclusion.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs. Terms as defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted as an ideal or excessively formal meaning unless explicitly defined in this application. Does not.

Meanwhile, when a certain embodiment can be implemented differently, a function or operation specified in a specific block may occur differently from the order specified in the flowchart. For example, two consecutive blocks may actually be executed at the same time, or the blocks may be executed backwards depending on a related function or operation.

Hereinafter, a terminal authentication method using a heterogeneous communication method according to an exemplary embodiment of the present invention and a vehicle terminal performing authentication using the same will be described in detail with reference to the accompanying drawings.

The terminal authentication method using a heterogeneous communication method according to a preferred embodiment of the present invention can be applied to authentication between a vehicle terminal and a portable terminal as shown in FIG. 1.

1 is a diagram showing the configuration of an example of a vehicle terminal performing authentication using a terminal authentication method according to a preferred embodiment of the present invention.

The vehicle terminal 110 performing authentication for the portable terminal 120 using the terminal authentication method according to the preferred embodiment of the present invention is a first communication module 111, a second communication module that communicates according to the first communication method. It includes a second communication module 112, an access point (AP) 113, and a vehicle control module (MICOM) 114 that communicates according to a method.

The access point 113 searches for the portable terminal 120 according to the first communication method, performs authentication on the found portable terminal 120, and then authenticates the portable terminal 120 according to the second communication method. Based on the result of the execution, a supportable function for the portable terminal 120 is set, and when a request from the portable terminal 120 corresponds to a set supportable function, a vehicle operation according to the request is made.

Hereinafter, for explanation, it is assumed that the first communication module 111 is a BT communication module 111 for BT (BlueTooth) communication, and the second communication module 112 is a WiFi communication module for WiFi communication. , The first communication module 111 and the second communication module 112 are not limited thereto.

The access point 113 searches for a nearby portable terminal 120, authenticates the searched portable terminal 120, and performs an operation in response to a request from the authenticated portable terminal 120.

In particular, the access point 113 performs both authentication through BT communication and authentication through WiFi communication with respect to the discovered mobile terminal 120, and authentication is performed through only one communication and through two communication. Different actions are performed when all authentication is performed.

Specifically, the access point 113 sets different access rights of the mobile terminal 120 when authentication is performed through only one communication and when authentication is performed through both communication.

To this end, the access point 113 may include a processing module 113a, an authentication module 113b, and a communication driver 113c.

The processing module 113a and the authentication module 113b may be configured to include at least one processor and a memory to perform a function, but one processor is the function of the processing module 113 and the function of the authentication module 113b. It may be implemented to perform.

The processing module 113a allows the search for the surrounding portable terminal 120 to be made, and authentication for the searched portable terminal 120 as previously programmed.

In addition, the processing module 113a determines whether or not the request from the mobile terminal 120 can be supported based on the authentication result in the authentication module 113b as previously programmed, and the request can be supported. In this case, the request is transmitted to the vehicle control module 114, and if the request is not a supportable request, the mobile terminal 120 notifies that the request is not supported.

In addition, the processing module 113a turns off the power of the BT communication module 111 or the WiFi communication module 112 when the support impossible command is received at a preset number of times according to the pre-programmed bar, and returns to the security center. Notify hacking attempts.

For example, when the modem 115 exists in the vehicle terminal 110, the processing module 113a may use the modem 115 to notify the security center of the hacking attempt.

As previously programmed, the processing module 113a may maintain the BT communication module 111 or the WiFi communication module 112 in an off state until receiving a security release message from the security center.

The authentication module 113b performs authentication for the portable terminal 120 using the BT communication module 111 and the WiFi communication module 112, and processes the authentication result by the processing module 113a and the vehicle control module 114. ).

The communication driver 113c is between the processing module 113a and the BT communication module 111, between the processing module 113a and the WiFi communication module 112, between the authentication module 113b and the BT communication module 111, and It serves as an interface for communication between the authentication module 113b and the WiFi communication module 112.

In the above, with reference to a diagram showing an example configuration of a vehicle terminal that performs authentication using a terminal authentication method according to a preferred embodiment of the present invention, functions for each configuration of the vehicle terminal have been described.

Hereinafter, FIG. 1 will be described in more detail with respect to a process in which a vehicle terminal authenticates a portable terminal using a terminal authentication method according to a preferred embodiment of the present invention.

2 is a view for explaining a process in which a vehicle terminal authenticates a portable terminal according to an exemplary embodiment of the present invention.

2, the access point 113 of the vehicle terminal 110 searches the mobile terminal 120 according to the first communication method (BT communication method or WiFi communication method), and the searched mobile terminal 120 is Authentication is performed (S200).

After performing the discovery and authentication according to the step S200, the access point 113 follows the second communication method (if the first communication method was a BT communication method, a WiFi communication method, and if the WiFi communication method, a BT communication method), the mobile terminal ( 120) is authenticated (S210), and it is determined whether authentication is successful through the second communication method (S220).

When the first communication method is a BT communication method (that is, when a BT communication module is used), the access point 113 requests a BT Pin code from the mobile terminal 120, and a BT Pin code provided in response to the request Based on, authentication for the portable terminal 120 may be performed.

When the second communication method is a WiFi communication method (that is, when a WiFi communication module is used), the access point 113 requests a WiFi WEP security key code from the mobile terminal 120, and is provided in response to the request. Authentication for the portable terminal 120 may be performed based on the WEP security key code.

As a result of the determination in step S220, if authentication is performed through the second communication method (S220-Yes), the access point 113 functions supported upon successful authentication through the first communication method and the second communication method (ex. , All functions supported by the system) are set as supportable functions (S230).

That is, in step S230, the access pointer 113 sets a supportable function so that the portable terminal 120 can access with the first authority.

After setting is made according to the step S230, the access point 113 provides the request from the mobile terminal 120 to the vehicle control module 114, so that the vehicle control module 114 makes a request from the mobile terminal 120. By performing, the vehicle operation according to the request may be performed (S240).

In addition, the access point 113 may periodically perform authentication on the portable terminal 120 according to the second communication method.

When the authentication for the portable terminal 120 fails in the process of periodically performing the authentication for the portable terminal 120 according to the second communication method, the access point 113, as described below, the first communication The operation is performed when authentication is performed only through the method.

As a result of the determination in step S220, if authentication through the second communication method fails (S220-No), the access point 113 sets a function supported at the time of authentication through the first communication method as a supportable function ( S250).

That is, in step S250, the access point 113 sets a supportable function so that the portable terminal 120 can access with the second authority, and the supportable function that can be accessed with the second authority is accessed with the first authority. These are some of the available supportable features.

Accordingly, the range of vehicle control through the portable terminal 120 is wider than when authentication is performed only by the first communication method, when authentication is performed by both the first and second communication methods.

For example, if the first communication method is a BT communication method (that is, only authentication through BT communication is successful), only a handsfree function may be set as a supportable function in step S250.

Of course, the supportable function when only authentication through BT communication is successful is not limited thereto and may be set differently.

As another example, when the first communication method is a WiFi communication method (that is, when only authentication through WiFi communication is successful), only a data transmission/reception function through wireless IP communication may be set as a supportable function in step S250.

Of course, the supportable function when only authentication through WiFi communication is successful is not limited thereto and may be set differently.

However, in the present invention, performing a plurality of authentications for mobile terminals using different communication methods is to increase the security of vehicle control, so if authentication is successful only through one communication method, at least the function for vehicle control is It is desirable not to set it as a supportable function.

After setting is made according to the step S250, the access point 113 receives a request from the portable terminal 120 and determines whether the received request corresponds to a set supportable function (S260).

As a result of the determination in step S260, if the received request corresponds to a supportable function (S260-Yes), the access point 113 provides the request from the portable terminal 120 to the vehicle control module 114, The vehicle control module 114 may perform a request from the portable terminal 120 to perform a vehicle operation according to the request (S240).

As a result of the determination in step S260, if the received request does not correspond to the supportable function (S260-No), the access point 113 indicates that the request from the portable terminal 120 does not correspond to the supportable function. It notifies the terminal 120 (S270), and stores the security violation occurrence information.

For example, the access point 113 may store security violation occurrence information including request details corresponding to the security violation and the number of occurrences.

Then, the access point 113 determines whether the number of security violations has reached a preset limit number (S280), and if it is determined that it has reached (S280-Yes), a preset operation (ex, power of the first communication module) May be turned off, and a hacking attempt is notified to the security center (S290).

For example, after notifying a hacking attempt to the security center, the access point 113 may maintain the first communication module in the off state until receiving a security release message from the security center.

As a result of the determination in step S280, when it is determined that the number of times the security violation has not reached the limit (S280-No), the access point 113 ends the operation.

Even if all the components constituting the embodiments of the present invention described above are described as being combined into one or operating in combination, the present invention is not necessarily limited to these embodiments. That is, within the scope of the object of the present invention, all the constituent elements may be selectively combined and operated in one or more. In addition, although all of the components can be implemented as one independent hardware, a program module that performs some or all functions combined in one or more hardware by selectively combining some or all of the components. It may be implemented as a computer program having In addition, such a computer program is stored in a computer readable media such as a USB memory, a CD disk, a flash memory, etc., and is read and executed by a computer, thereby implementing an embodiment of the present invention. The computer program recording medium may include a magnetic recording medium, an optical recording medium, and a carrier wave medium.

As described above, a terminal authentication method using a heterogeneous communication method according to the present invention and a vehicle terminal performing authentication using the same have been described according to embodiments, but the scope of the present invention is not limited to a specific embodiment, and the present invention In connection with the invention, it can be implemented with various alternatives, modifications and changes within the range that is obvious to those of ordinary skill in the art.

Accordingly, the embodiments described in the present invention and the accompanying drawings are not intended to limit the technical idea of the present invention, but to explain, and the scope of the technical idea of the present invention is not limited by these embodiments and the accompanying drawings. . The scope of protection of the present invention should be interpreted by the claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present invention.

110: vehicle terminal
111: first communication module
112: second communication module
113: access point
113a: processing module
113b: authentication module
113c: communication driver
114: vehicle control module
115: modem
120: mobile terminal

Claims (10)

The vehicle terminal searching for the portable terminal according to the first communication method and performing authentication for the searched portable terminal;
When authentication is completed, performing, by the vehicle terminal, authentication for the portable terminal according to a second communication method;
Setting, by the vehicle terminal, a supportable function according to an authentication result according to the second communication method; And
And if the request from the portable terminal corresponds to the supportable function, causing the vehicle terminal to perform a vehicle operation according to the request.
Terminal authentication method using heterogeneous communication method. The method of claim 1,
When the first communication method is a BT (BlueTooth) communication method, the second communication method is a WiFi communication method, and when the first communication method is a WiFi communication method, the second communication method is a BT communication method.
Terminal authentication method using heterogeneous communication method. The method of claim 1,
The setting step,
In case the authentication according to the second communication method is successful, setting a function supported when authentication is successful through the first and second communication methods as the supportable function
Terminal authentication method using heterogeneous communication method. The method of claim 1,
The setting step,
In case the authentication according to the second communication method fails, setting a function supported when authentication is successful through the first communication method as the supportable function
Terminal authentication method using heterogeneous communication method. The method of claim 1,
If the request from the portable terminal does not correspond to the supportable function, comprising notifying the occurrence of a security violation to the portable terminal
Terminal authentication method using heterogeneous communication method. A first communication module for communicating in a first communication method;
A second communication module for communicating through a second communication method; And
Support for the portable terminal based on a result of searching for a portable terminal according to the first communication method, performing authentication for the searched portable terminal, and performing authentication for the portable terminal according to the second communication method And an access point configured to set an available function, and to perform a vehicle operation according to the request when the request from the portable terminal corresponds to the supportable function
A vehicle terminal that performs authentication using a heterogeneous communication method. The method of claim 6,
When the first communication module is a BT communication module that communicates with BT (BlueTooth), the second communication module is a WiFi communication module that communicates with WiFi, and when the first communication module is a WiFi communication module, the second communication module is BT communication module
A vehicle terminal that performs authentication using a heterogeneous communication method. The method of claim 6,
The access point is
An authentication module that authenticates the portable terminal according to the first communication method and the second communication method; And
A processing module configured to set the supportable function for the portable terminal according to the authentication result by the authentication module, and to perform a vehicle operation according to the request when the request from the portable terminal corresponds to the supportable function Containing
A vehicle terminal that performs authentication using a heterogeneous communication method. The method of claim 8,
The processing module is configured to set a supportable function when authentication according to the second communication method fails to be included within a category of a supportable function when authentication according to the second communication method is successful.
A vehicle terminal that performs authentication using a heterogeneous communication method. The method of claim 8,
If the request from the portable terminal does not correspond to the supportable function, the processing module notifies the portable terminal of the occurrence of a security violation.
A vehicle terminal that performs authentication using a heterogeneous communication method.

Images