KR20220041695A - System and method for access control using blockchain network and computer program for the same - Google Patents

Abstract

An access control system includes: a photographing part installed in a complex facility, and formed to photograph an image of at least one access route to the complex facility; an operation part installed in the complex facility, and formed to receive user input associated with at least one of opening and closing operations of a blocking facility installed at the at least one access route; a communication part formed to communicate with a blockchain network maintained by a plurality of nodes; and a control part formed to generate access event information corresponding to the user input received by the operation part, and control the photographing part and the communication part so as to store the access event information and an access image, which is photographed by the photographing part and corresponds to an access event occurrence time, by using the blockchain network. Through the access control system, access records for a complex facility such as a building can be stored in a smart contract form on the blockchain network, and, accordingly, the access records can be prevented from being forged and can be easily retrieved.

Description

Access control system and method using block chain network, and computer program for the same

Embodiments relate to an access control system and method, and a computer program therefor. More specifically, the embodiments relate to a technology that prevents forgery of access records and enables easy reading by storing access records for collective facilities such as buildings in the form of a smart contract on a blockchain network. it is about

In companies with a lot of information that needs to be kept secure, such as trade secrets, in most cases, a door control system is installed and used to control the access of outsiders to the facility or to manage the access of users. Access to the facility is possible only if they possess a pre-issued access card, enter a preset password, or are verified based on biometric authentication such as a fingerprint, and in some cases, This verification is sometimes required at every entry and exit. In addition, CCTV can be installed at the entrance of the facility to check the occupants by video.

However, even when strict restrictions on access to a building or facility are operated in this way, the access record of the door control system is stored in the device itself of the corresponding door control system or one server in the company connected thereto and managed in a centralized way it is common to be In this case, when a malicious user accesses the access record, the user's access information may be easily exposed, and there is a problem in that the reliability of the record is easily damaged, such as the access record being forged or forged by the outside.

For example, in the prior art, Korean Patent Publication No. 10-1445599 discloses an apparatus and method for automatically issuing a face recognition type smart paper pass. However, since the system of Registered Patent Publication No. 10-1445599 is configured to centrally store the access records generated using the pass in the building central management server, there is a risk of forgery or forgery of the access records due to hacking on the building central management server. However, due to storage capacity or period problems, access records cannot be permanently preserved.

Registered Patent Publication No. 10-1445599

According to one aspect of the present invention, by storing access records for collective facilities, such as buildings, in the form of a smart contract on a blockchain network, forgery and falsification of access records by malicious users is prevented and access records are stored. An access control system and method for easy reading, and a computer program for this may be provided.

An access control system according to an embodiment includes: a photographing unit installed in a collective facility and configured to photograph an image of one or more access paths to the collective facility; a manipulation unit installed in the collective facility and configured to receive a user input related to at least one of opening and closing of the blocking facility installed in the at least one access path; a communication unit configured to communicate with a blockchain network maintained by a plurality of nodes; and generating access event information in response to the user input received from the manipulation unit, and using the block chain network to use the access event information and the access image captured by the photographing unit corresponding to the occurrence time of the access event and a control unit configured to control the photographing unit and the communication unit to store.

In one embodiment, the control unit generates a hash value of the access event information, and stores the access event information in a data block on the block chain network in the form of a smart contract including the hash value. and uploading the access image to a data block on a sidechain linked with the blockchain network in association with the access event information.

The access control system according to an embodiment further includes a sensor unit installed in the collective facility and configured to detect the presence or location of a person in the collective facility. In this case, the control unit defines the entry/exit event generated in a state in which a person is detected by the sensor unit and an entry/exit event generated in a state in which a person is not detected by the sensor unit as different types of smart contracts to define the block and upload to the data block on the chain network.

In an embodiment, the operation unit is further configured to receive user identification information of a user requesting the opening or closing of the blocking facility. At this time, the smart contract corresponding to the access event information subtracts a token managed by the block chain network from the user's electronic wallet address corresponding to the user identification information or adds the token to the user's electronic payment address. It is defined as a contract for depositing

In one embodiment, the communication unit is further configured to transmit one-time authentication information to a user device corresponding to the user identification information by using the user identification information received from the operation unit, and the operation unit is configured to receive the one-time authentication information from the user. and receive information.

An access control method according to an embodiment includes: photographing, by an access control system installed in a collective facility, an image of one or more access paths to the collective facility; receiving, by the access control system, a user input related to at least one of opening and closing of a blocking facility installed in the at least one access path; generating, by the access control system, access event information corresponding to the user input; and storing, by the access control system, the access event information and the access image photographed corresponding to the time of occurrence of the access event on a block chain network maintained by a plurality of nodes.

In one embodiment, the step of storing on the blockchain network may include: generating, by the access control system, a hash value of the access event information; uploading, by the access control system, the access event information to a data block on the block chain network in the form of a smart contract including the hash value; and uploading, by the access control system, the access image to a data block on a sidechain that is linked with the block chain network in association with the access event information.

The access control method according to an embodiment further includes, before receiving the user input, the access control system detecting the presence or location of a person in the collective facility by one or more sensors installed in the collective facility. include In this case, the uploading to the data block on the block chain network includes an access event that occurs when the access control system detects a person by the one or more sensors, and a state in which a person is not detected by the one or more sensors and defining the entry/exit events generated in the smart contract as different types of smart contracts and uploading them to a data block on the blockchain network.

In an embodiment, the receiving of the user input includes, by the access control system, receiving user identification information of a user requesting to open or close the blocking facility. In addition, the smart contract corresponding to the access event information deducts the token managed by the blockchain network from the user's electronic wallet address corresponding to the user identification information or deposits the token in the user's electronic wallet address. defined by contract.

In an embodiment, the receiving of the user input may include: transmitting, by the access control system, one-time authentication information to a user device corresponding to the user identification information; and receiving, by the access control system, the one-time authentication information from the user.

The computer program according to an embodiment is combined with hardware to execute the access control method according to the above-described embodiments, and may be stored in a computer-readable medium.

According to the access control system and method according to an aspect of the present invention, since the management records of buildings, etc. are recorded in the form of a smart contract on a blockchain network, semi-permanent storage of access records is possible, It can prevent a malicious user from forging or falsifying access records, and there is an advantage in that access records can be easily viewed when necessary.

In addition, in the access control system and method according to an aspect of the present invention, by uploading video records such as CCTV at the time of occurrence of an access event to the side chain of the block chain network, restrictions according to the data block size on the main block chain network While it is possible to store the entrance and exit images without receiving a message, it is possible to solve the problem that CCTV images are lost after a limited storage period as in the prior art.

Furthermore, according to the access control system and method according to an aspect of the present invention, when the access record is stored, the user's identification information is included in the access record through communication with the user terminal, etc., such as coronavirus infection (COVID-19) There is an advantage that the access control system and method can be utilized for the creation of a visitor list to prevent the spread of disease.

1 is a conceptual diagram illustrating an exemplary form in which an access control system according to an embodiment is applied to a building.
2 is a schematic block diagram of an access control system according to an embodiment.
3 is a flowchart illustrating each step of an access control method according to an exemplary embodiment.
4 is a flowchart illustrating each step of a process of storing access event information in a blockchain network in an access control method according to an embodiment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

1 is a conceptual diagram illustrating an exemplary form in which an access control system according to an embodiment is applied to a building.

Referring to FIG. 1 , the access control system according to the present embodiment may include a management server 3 including a photographing unit 10 , a manipulation unit 20 , and a communication unit and a control unit. The photographing unit 10 is installed in the assembly facility 1 and serves to photograph an image of an access path to the assembly facility 1 . The operation unit 20 is a device that a user who enters the assembly facility 1 operates to open or close the blocking facility for the entrance of the assembly facility 1 . For example, the operation unit 20 recognizes a keypad or fingerprint of the door. It may refer to a locking device equipped with a sensor, and the like.

In an embodiment, the communication unit and the control unit may be implemented in the management server 3 configured to be able to communicate with the photographing unit 10 and the manipulation unit 20 . The communication unit is a part for communicating with the blockchain network 2 composed of a plurality of nodes 200 . In addition, the control unit generates access event information corresponding to a person's access to the access facility 1 and controls the communication unit to display the access event information and the photographed image of the photographing unit 10 at the time of entry on the block chain network 2 . This is the part to upload to the data block.

For the above operation, the management server 3 is configured to be communicatively connected with the photographing unit 10 , the operation unit 20 and the block chain network 2 through a wired and/or wireless network. In addition, the management server 3 may be communicatively connected to one or more sensors 4 installed in the collective facility 1 . The communication method between the management server 3 and the photographing unit 10, the operation unit 20, one or more sensors 4 and/or the block chain network 2 is that the object and the object are networking through a wired and/or wireless network. It may include all possible communication methods, and is not limited to wired communication, wireless communication, 3G, 4G, or other methods.

For example, a wired and/or wireless network between the management server 3 and the photographing unit 10, the operation unit 20, one or more sensors 4 and the blockchain network 2 is a LAN (Local Area Network), Metropolitan Area Network (MAN), Global System for Mobile Network (GSM), Enhanced Data GSM Environment (EDGE), High Speed Downlink Packet Access (HSDPA), Wideband Code Division Multiple Access (W-CDMA), Code Division Multiple Access (CDMA) ), Time Division Multiple Access (TDMA), Bluetooth, Zigbee, Wi-Fi, Voice over Internet Protocol (VoIP), LTE Advanced, IEEE802.16m, WirelessMAN-Advanced, HSPA+, 3GPP Long Term Evolution (LTE), Mobile WiMAX (IEEE 802.16e), UMB (formerly EV-DO Rev. C), Flash-OFDM, iBurst and MBWA (IEEE 802.20) systems, HIPERMAN, Beam-Division Multiple Access (BDMA) , Wi-MAX (World Interoperability for Microwave Access), and may refer to a communication network using one or more communication methods selected from the group consisting of ultrasound-based communication, but is not limited thereto.

2 is a schematic block diagram of an access control system according to an embodiment. For convenience of description, the configuration of the access control system according to the present embodiment will be described with reference to FIGS. 1 and 2 .

The access control system 100 according to the present embodiment includes a photographing unit 10 , a manipulation unit 20 , a communication unit 30 , and a control unit 50 . In an embodiment, the access control system 100 further includes a sensor unit 40 . Also, in an embodiment, the access control system 100 further includes an authentication unit 70 . Further, in an embodiment, the access control system 100 further includes a database (DB) 60 . Some or all of the aforementioned units may be implemented in the management server.

The access control system 100 according to the embodiments and each unit (10, 20, 30, 40, 50, 60, 70) included therein is entirely hardware, or partly hardware and partly software. can have sides. For example, the access control system 100 and each unit (10, 20, 30, 40, 50, 60, 70) included therein is hardware for processing data in a specific format and content and/or sending and receiving data in an electronic communication method. and software related thereto. As used herein, terms such as “unit”, “module”, “device”, “terminal”, “server” or “system” are intended to refer to a combination of hardware and software driven by the hardware. For example, the hardware may be a data processing device including a CPU or other processor. In addition, software driven by hardware may refer to a running process, an object, an executable file, a thread of execution, a program, and the like.

In addition, each element constituting the access control system 100 is not necessarily intended to refer to separate devices physically separated from each other. That is, each part of the access control system 100 shown in FIG. 2 , in particular, the communication unit 30 , the sensor unit 40 , the control unit 50 , the DB 60 , the authentication unit 70 , etc. is an access control system The hardware constituting 100 is only functionally classified according to the operation performed by the corresponding hardware, and each part does not necessarily have to be provided independently of each other. Of course, depending on the embodiment, one or more of the communication unit 30 , the sensor unit 40 , the control unit 50 , the DB 60 , and the authentication unit 70 may be implemented as separate devices physically separated from each other. Do.

As described above with reference to FIG. 1 , the photographing unit 10 is installed at a location capable of photographing the access route of the assembly facility 1 and serves to capture an image of the access route. For example, the photographing unit 10 may be installed on a ceiling or a wall at a location capable of photographing the vicinity of the entrance of the assembly facility 1 , but the installation location of the photographing unit 10 is not limited thereto. The collective facility 1 may refer to a facility where a large number of people live or work, such as an apartment, officetel, factory, etc., and is not limited to a specific form.

In addition, the photographing unit 10 is a device configured to photograph an image of an access path through which a person or a vehicle enters and exits the assembly facility 1 , and may be, for example, a CCTV, but is not limited thereto. The photographing of the entry/exit route by the photographing unit 10 may be configured to be performed at all times, or preset in response to the occurrence of a specific event such as operation of the operation unit 20 or detection of an entrance or exit by a sensor (not shown). It may be configured so that the photographing of the access route is made during time.

The operation unit 20 is a device configured to operate for opening/closing of a blocking facility accessing the assembly facility 1 or registering the fact of entry. For example, the manipulation unit 20 may be a locking device provided at the entrance of a building and configured to input a password or fingerprint using a keypad. In addition, at this time, the blocking device that is opened and/or closed by the operation of the operation unit 20 refers to any means related to the entrance of the assembly facility 1 , for example, the blocking device is the door itself or installed on the door. It may mean a locking device, a blocking rod for controlling the access of a vehicle, or any means for controlling access to the assembly facility 1 by other methods.

In addition, the manipulation of the manipulation unit 20 may not necessarily be for operating the physical blocking device. For example, even if there is no device that physically blocks access to the assembly facility 1, a person entering and exiting the assembly facility 1 may operate the operation unit 20 for the purpose of recording their own entry and exit. . For example, when the collective facility 1 is a work space of a company, the device used by the company's executives and employees to register their attendance and time or whether they leave the office and time may correspond to the operation unit 20 . .

When it is confirmed that the user enters the collective facility 1 through the user input on the operation unit 20 , the control unit 50 may generate access event information corresponding to the user input received on the operation unit 20 . . The access event information may include an access date and time and the contents of a user input input to the operation unit 20 . In addition, when the visitor inputs information that can identify himself (fingerprint, the number used by the visitor in the collective facility, the employee number of the visitor, etc.) into the operation unit 20, the identification information of the visitor is included in the access event information. may be included together.

In addition, the controller 50 uploads the generated access event information to a data block on the block chain network 2 , so that the access event information is stored in the distributed ledger on the block chain network 2 . In addition, the control unit 50 may store the access image captured by the photographing unit 10 according to the access time of the access event information using the block chain network 2 . The above operation may be performed by the control unit 50 controlling the communication unit 30 .

In an embodiment, the controller 50 may generate a hash value of the access event information, and upload the access event information to a data block on the blockchain network 2 including the hash value. Also, the control unit 50 may upload the access event information to the block chain network 2 in the form of a smart contract. At this time, the access event information is in the form of a smart contract that defines a transaction related to the deposit and withdrawal of a token whose transaction details are recorded and managed by the distributed ledger on the blockchain network (2). stored in the data block on the

Meanwhile, in an embodiment, the controller 50 may upload an access image corresponding to the access event information to a data block on a sidechain rather than the main net of the blockchain network 2 . When uploading an access video to a sidechain, the transaction processing speed can be greatly increased by introducing a sidechain that uses a consensus algorithm such as Proof of Authority (POA), and there is an advantage in that the fee burden can be lowered. . In addition, there are advantages such as allowing the service provider of the sidechain service to bear the transaction fee and using the signature function of a third-party electronic wallet application with high ease of use to easily sign the transaction.

On the other hand, if the access image is uploaded to the sidechain as it is, transaction processing performance may deteriorate and the fee burden of the service provider providing the sidechain service may increase. In order to solve this problem, in one embodiment, the access image is stored in a separate storage such as the DB 60 of the access control system, and only the storage location information of the access image on the DB 60 is stored in a transaction and uploaded to the sidechain. By doing so, it is possible to lighten the transaction.

In one embodiment, the sensor unit 40 may be configured to detect the presence or location of a person in the assembly facility 1 using one or more sensors 4 installed in the assembly facility 1 . For example, the one or more sensors 4 may be installed in each room or zone dividing the internal space of the assembly facility 1, and may be an infrared sensor capable of detecting a person in the corresponding room or zone. In addition, the sensor 4 may be formed integrally with a lighting fixture inside the assembly facility 1 . However, the sensor 4 may be any device capable of detecting the presence or location of a person, and is not limited to the above-described configuration.

When the presence and/or location of a person in the assembly facility 1 is detected by the sensor unit 40 , the control unit 50 controls the entry/exit event generated in the state where the person is detected by the sensor unit 40 and the sensor unit By (40), it is also possible to define access events generated in a state in which a person is not detected as different types of smart contracts and upload them to a data block on the blockchain network (2). For example, when an entry/exit event occurs in a state in which a person is not detected by the sensor unit 40 , it may be regarded as having higher importance than a normal entry/exit event, and this may be defined as a different type of smart contract.

In one embodiment, the access control system receives the occupant identification information through communication with the occupant's user device (not shown) when there is an occupant entering the assembly facility 1 using the operation unit 20, and/or It can perform the function of authenticating the access authority of the visitor. For example, when there is a user input for entry into the operation unit 20 , identification information (eg, a mobile phone number) of the user device is input through the operation unit 20 , and the authentication unit 70 is connected to the user device. One-time authentication information (eg, password) may be transmitted. Thereafter, the authentication unit 70 may allow access to the assembly facility 1 by opening the blocking device only when the same one-time authentication information as the one-time authentication information transmitted to the visitor is input to the operation unit 20 .

According to the present embodiment, since identification information (eg, a mobile phone number) of a user device capable of identifying an entrant is input to the operation unit 20 in the process of entering and exiting the assembly facility 1, using this information, the assembly facility 1 is used. ) can be managed, and the corresponding identification information can be included in the access event information and stored in the blockchain network (2).

In addition, according to the present embodiment, it may be checked whether or not the entrant has the right to access the assembly facility 1 using the identification information of the user device input by the entrant. To this end, user information including identification information of user devices of users who have access to the collective facility 1 may be stored in advance in the DB 60 of the access control system, and the authentication unit 70 may be configured by the operation unit ( By comparing the identification information of the user device input in 20) with the user information of the DB 60, it is possible to verify whether the person currently requesting access is a user with access authority, and access is denied by a user without access authority. When requested, the control unit 20 and the blocking device of the assembly facility 1 may be controlled to reject the access request. Furthermore, the fact of access request by an unauthorized user may also be stored in a data block on the blockchain network 2 as a type of access event information.

3 is a flowchart illustrating each step of an access control method according to an exemplary embodiment. The access control method according to the embodiments may be performed using the access control system according to the embodiments of the present invention. Hereinafter, for convenience of description, each step of the access control method according to the embodiments will be described with reference to FIGS. 1 to 3 .

First, the access control system may capture an access image for the access path of the assembly facility 1 by the photographing unit 10 (S1). In an embodiment, the access control system may use one or more sensors 4 of the sensor unit 40 to detect the presence or location of a person in each room or area within the assembly facility 1 (S2). The above photographing and detection operations may be performed all the time, or may be performed only when a specific event such as manipulation of the manipulation unit 20 occurs.

When a person who wishes to enter the assembly facility 1 requests access by operating the control unit 20 (S3), the access control system stores access event information by the process described below and sends the information to the operation unit 20. Depending on the operation, it is possible to open or close the blocking facility for the access path. In this case, the blocking facility may refer to a locking device for a door or a bar for blocking vehicle entry, but is not limited thereto.

In an embodiment, the access control system may be further configured to receive the identification information of the entrant through the operation unit 20, and further may be further configured to perform authentication of the entrant using the identification information of the entrant. To this end, first, the access control system may specify the person entering through the user input to the operation unit 20 (S4). In this way, when entering and exiting the collective facility 1, the visitor can identify himself/herself, such as identification information (eg, mobile phone number) of his/her user device, the number of use within the collective facility set in advance, employee number of the visitor, fingerprint of the visitor, etc. This can be done by having to input the information that is there.

When an entrant is specified, the access control system may transmit one-time authentication information (eg, authentication number) to the user device of the entrant (S5). This may be accomplished by transmitting a text message or a push notification of an application to the input number when the visitor inputs his or her mobile phone number into the operation unit 20, or in advance to the user in the access control system. When the information is stored in DB, the identification information of the entrant may be retrieved from the user information of the DB 60 and the authentication information may be transmitted to the user device of the entrant through a text message or a push notification.

When the occupant who has received the authentication information inputs authentication information to the operation unit 20 (S6), the access control system verifies whether the authentication information transmitted to the entrant matches the authentication information input to the operation unit 20 to perform an access event Information can be generated (S7). The access event information may include access date and time, identification information related to the user who requested access, and information on whether the user's access is permitted.

In addition, when the authentication information transmitted to the occupant and the authentication information input to the operation unit 20 match, the access control system sets the collective facility so that the entrant can enter or leave the collective facility 1 . The blocking device of (1) can be controlled (S8). However, depending on the embodiment, the blocking facility may refer to the door itself of the assembly facility 1 that is not equipped with a separate locking device. In this case, the blocking device control process by the access control system (S8) is necessary You may not.

Meanwhile, the access control system may store the aforementioned access event information in a data block on the block chain network 2 (S9). In one embodiment, access event information may be recorded in a distributed ledger on the blockchain network 2 in the form of a smart contract that defines a transaction based on a token managed on the blockchain network 2 . In addition, an access image captured by the photographing unit 10 at a point in time corresponding to the access date and time of the access event information may also be stored using the block chain network 2 .

According to the above embodiment, since the access record for the collective facility (1) such as a building is recorded in the form of a smart contract on the distributed ledger on the block chain network (2), semi-permanent storage of the access record is possible, and malicious users access Forgery of records can be prevented, and access records can be easily viewed when necessary. In addition, if additional identification information related to the visitor is received when an access event occurs, the access control system is included in the access record to prevent the spread of diseases such as coronavirus infection (COVID-19). It can be used for writing.

4 is a flowchart illustrating each step of a process of storing access event information in a block chain network in an access control method according to an embodiment.

1, 2 and 4, in this embodiment, the access information to the collective facility 1 is a transaction related to the movement of a token in which the transaction details are recorded by the distributed ledger on the block chain network 2 It is recorded in a block of data on the blockchain network 2 in the form of a defining smart contract. To this end, in the present embodiment, the control unit 50 of the access control system may give a unique electronic wallet address to each of the users having access to the collective facility 1 .

Also, in one embodiment, the control unit 50 may provide a certain amount of tokens at regular intervals to the electronic wallet addresses of each user (S10). This is to manage the access event in conjunction with the token transaction on the blockchain network 2 by defining a smart contract so that deposit or withdrawal of tokens using users' electronic wallet addresses occurs when an access event occurs. It will be described later.

When an access event occurs by the person entering the assembly facility 1 by operating the operation unit 20 (S11), the control unit 50 controls access date and time, identification information related to the person entering the facility (identification information of the target lake or area, the person entering and leaving). identification information, identification information of the user's device, etc.), and/or information such as whether or not access is permitted can be used as one data record to generate access event information (S12). In addition, the control unit 50 may generate a hash value of the access event information to upload to the block chain network (2).

Next, the control unit 50 uploads the access event information to a data block on the block chain network 2 so that the access event information is recorded in the distributed ledger on the block chain network 2 (S13). Also, in one embodiment, the control unit 50 may store the access image at the time corresponding to the access date and time of the access event information using the block chain network 2 (S14). Like access event information, the access image may be stored in the main net of the block chain network 2 or in a data block on a side chain that operates in conjunction with the main net of the block chain network 2 . Alternatively, the access image itself may be stored in the access control system, and information on the storage location may be converted into a hash value or the like and stored in the sidechain of the block chain network 2 .

In one embodiment, the smart contract in which access event information is recorded deducts a token managed by the blockchain network 2 from the electronic wallet address of the user identified as an access or access control system to the electronic payment address of the user It is a contract for depositing tokens from the manager's electronic wallet address, and when an access event occurs, the access control system may be configured to deposit and withdraw tokens accordingly (S15). This goes beyond storing the access record in the blockchain network 2 by the access control system, and will be used for managing the outing time or staying time of users based on the access record based on the deposit and withdrawal of tokens. can

For example, the control unit 50 of the access control system may collectively pay the same amount of tokens every predetermined period (eg, 1 day) to users who have access to the collective facility 1 ( S10). Thereafter, when a specific user's access event occurs, the control unit 50 of the access control system controls the type (entry or exit) and access date and time of the previous access event of the same user, and the type (entry or exit) and exit of the current access event. By comparing the date and time, it is possible to calculate the outing time of the corresponding user. For example, if the previous entry/exit event is an exit event that occurred at 15:00, and the current entry/exit event is an entry event that occurred at 16:00, comparing the two entry/exit events, the corresponding user went out from the assembly facility 1 for 1 hour. state was known.

At this time, when the outing time when the user has left the collective facility 1 is defined through comparison of a specific access event with the previous access event, the control unit 50 stores access event information on the block chain network 2, Access event information can be stored in the distributed ledger in the form of a smart contract in which a token corresponding to the user's outing time is withdrawn from the user's e-wallet address and deposited into the e-wallet address of the operator of the access control system.

For example, if it is assumed that 100 tokens are provided to each user with access rights every day, and 20 tokens are transferred from the visitor to the operator whenever 1 hour of outing time is recognized through an access event, each user's outing Time is managed in the form of token transfer amount, and each user can go out for up to 5 hours a day.

When an outing time exceeding the amount of tokens paid occurs, that is, when the amount of tokens to be transferred corresponding to the outing time is greater than the remaining token amount in the user's e-wallet address, the control unit 50 records the fact to the DB 60 By recording in or notifying the user through the operation unit 20, the user or the administrator of the access control system can know this. Alternatively, when an outing that requires the movement of more tokens than the remaining amount of tokens in the user's electronic wallet address occurs, the control unit 50 controls the operation unit 20 or the assembly facility 1 so that the user cannot enter and exit. It is also possible to control a blocking device and the like for the path.

In the embodiment described above, when the collective facility 1 is a company and each user is an employee of the company, the purpose is to manage the working attitude through management of the employees' outing time, or the collective facility 1 is a collective residence such as an apartment It is a facility and if each user is a resident of an apartment, etc., it can be used for the purpose of providing appropriate guidance by specifying the resident who has been away from the residence for a long time. In addition, although an embodiment of calculating the outing time based on the type of access event and the access date and time has been described in this specification, an access control system to manage the residence time of each user in the collective facility 1 using the same principle It is also possible to configure

Furthermore, the token transaction using the e-wallet address of the visitor is based on whether or not a person in the assembly facility 1 is detected by the sensor at the time of the entry/exit event. may be different. For example, if the collective facility (1) is a company building, the entry/exit event that occurs during work hours while no person is detected in the collective facility (1) means that the person in question entered the company building earlier, so It is also possible to realize compensation according to the type of access event, such as paying a corresponding token reward to the e-wallet address of the visitor, using a token on the blockchain network 2 .

The operation by the access control method according to the embodiments described above may be implemented at least partially as a computer program and recorded in a computer-readable recording medium. A computer-readable recording medium in which a program for implementing an operation by the access control method according to the embodiments is recorded and includes all types of recording devices in which computer-readable data is stored. Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, and optical data storage device. In addition, the computer-readable recording medium may be distributed in a network-connected computer system, and the computer-readable code may be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the present embodiment may be easily understood by those skilled in the art to which the present embodiment belongs.

Although the present invention as described above has been described with reference to the embodiments shown in the drawings, it will be understood that these are merely exemplary, and that various modifications and variations of the embodiments are possible therefrom by those of ordinary skill in the art. However, such modifications should be considered to be within the technical protection scope of the present invention. Accordingly, the true technical protection scope of the present invention should be defined by the technical spirit of the appended claims.

Claims (5)

a photographing unit installed in a collective facility and configured to photograph an image of one or more access paths to the collective facility;
a manipulation unit installed in the collective facility and configured to receive a user input related to at least one of opening and closing of the blocking facility installed in the at least one access path;
a communication unit configured to communicate with a blockchain network maintained by a plurality of nodes; and
The access event information is generated in response to the user input received from the manipulation unit, and the access event information and the access image corresponding to the occurrence time of the access event and captured by the photographing unit are stored using the block chain network. To include a control unit configured to control the photographing unit and the communication unit,
The control unit is
generating a hash value of the access event information, and uploading the access event information to a data block on the block chain network in the form of a smart contract including the hash value;
and uploading the access image to a data block on a sidechain linked with the blockchain network in association with the access event information,
The operation unit is further configured to receive user identification information of a user who requests the opening or closing of the blocking facility,
The smart contract corresponding to the access event information is a contract in which a token managed by the blockchain network is deducted from the user's electronic wallet address corresponding to the user identification information or the token is deposited in the user's electronic payment address. A defined access control system.
The method of claim 1,
The communication unit is further configured to transmit one-time authentication information to a user device corresponding to the user identification information by using the user identification information received from the operation unit,
The access control system is further configured to receive the one-time authentication information from the user.
Taking, by an access control system installed in the collective facility, an image of one or more access paths to the collective facility;
receiving, by the access control system, a user input related to at least one of opening and closing of a blocking facility installed in the at least one access path;
generating, by the access control system, access event information corresponding to the user input; and
Storing, by the access control system, the access event information and the access image photographed corresponding to the time of occurrence of the access event on a block chain network maintained by a plurality of nodes,
The step of storing on the blockchain network includes:
generating, by the access control system, a hash value of the access event information;
uploading, by the access control system, the access event information to a data block on the block chain network in the form of a smart contract including the hash value; and
and uploading, by the access control system, the access image in association with the access event information to a data block on a sidechain linked to the block chain network,
Receiving the user input includes, by the access control system, receiving user identification information of a user requesting to open or close the blocking facility,
The smart contract corresponding to the access event information is a contract in which the token managed by the blockchain network is subtracted from the user's electronic wallet address corresponding to the user identification information or the token is deposited in the user's electronic wallet address. A defined access control method.
4. The method of claim 3,
Receiving the user input comprises:
transmitting, by the access control system, one-time authentication information to a user device corresponding to the user identification information; and
The access control method further comprising the step of receiving, by the access control system, the one-time authentication information from the user.
A computer program stored in a computer-readable recording medium in combination with hardware to execute the access control method according to claim 3 or 4.

Images