KR20220094091A - Vehicle operation control system and control method of vehicle terminal device - Google Patents

Abstract

Disclosed are a vehicle operation control system capable of checking if a digital key user is in a vehicle and a control method of a vehicle terminal device. According to the present invention, the vehicle operation control system comprises: a vehicle terminal device mounted in a vehicle and determining whether a user is in the vehicle through user authentication information; and a user terminal device controlling the operation of the vehicle through a vehicle control application and, if the user authentication information is inputted, generating authentication data related to the user authentication information and transmitting the information to the vehicle terminal device. The vehicle terminal device displays the user authentication information in accordance with a request for authentication of the user terminal device, and if it is determined that the user is in the vehicle based on the authentication data received from the user terminal device, controls the operation of the vehicle based on the vehicle authority information of the user.

Description

Vehicle operation control system and control method of a vehicle terminal device capable of confirming vehicle occupancy {Vehicle operation control system and control method of vehicle terminal device}

The present invention relates to a vehicle operation control system and a method for controlling a vehicle terminal device capable of confirming the vehicle boarding of a digital key user. It relates to a vehicle operation control system capable of this and a method for controlling a vehicle terminal device.

With the recent development of technology, various convenience facilities for vehicles are being provided. Representatively, the user may turn on the ignition of the vehicle, turn on/off the door of the vehicle, or control the temperature in the vehicle by using the vehicle control application installed in the user's smart phone.

On the other hand, the vehicle is being implemented to be capable of starting for the purpose of driving only when the vehicle key is necessarily present in the vehicle for the purpose of security and safety.

In the case of the FOB key, which was generally used as a remote key according to the prior art, accurate distance measurement was possible through LF/RF communication, so it was possible to check whether the FOB key is located inside the vehicle. In the state that the vehicle is started through the vehicle control application corresponding to There was a problem that could not be done.

That is, in the case of a digital key using a smart device, there is a problem in that it is difficult to accurately measure the location due to the technical limitations of short-range wireless communication such as Bluetooth and Wi-Fi.

For this reason, in the case of using the digital key installed in the smart phone according to the prior art, the driver cannot drive immediately even when the vehicle is started through the vehicle control application. There was a problem with driving.

Therefore, there is an urgent need for a realistic and applicable technology that can check whether a user with a smart phone is in the vehicle even if the digital key installed in the smart phone is used.

The present invention has been devised in accordance with the above-mentioned necessity, and an object of the present invention is to provide a vehicle operation control system and a method of controlling a vehicle terminal device capable of not only checking the vehicle boarding of a digital key user in a remote starting state but also driving the vehicle. is to provide

A vehicle operation control system according to an embodiment of the present invention for achieving the above object is mounted inside a vehicle, and through a vehicle terminal device and a vehicle control application that determine whether the user is in the vehicle through user authentication information, and a user terminal device that controls an operation of a vehicle and, when the user authentication information is input, generates authentication data related to the user authentication information and transmits it to the vehicle terminal device, wherein the vehicle terminal device includes the user terminal device displays the user authentication information according to an authentication request of to control

In addition, the user authentication information may include at least one of QR code and PIN code information.

In addition, the vehicle terminal device, the communication unit including a short-range wireless communication module for performing data communication with the user terminal device in a Bluetooth communication method. A storage unit for storing at least one of terminal information and vehicle authorization information of a user terminal device registered for using a digital key, a digital key of a user, a display unit displaying the user authentication information, and a vehicle control command of the user terminal device, After generating a random value, encrypting the random value using the session value included in the terminal information, and controlling the display unit to display the user authentication information including the encrypted random value, the communication unit When authentication data generated based on the user authentication information is received from the user terminal device through , a control unit that determines that the user is in the vehicle.

And, when it is determined that the user is in the vehicle, the control unit controls the operation of the vehicle based on the vehicle authority information stored in the storage unit, and the vehicle authority information includes the vehicle driving authority and vehicle start It may include at least one of authority and vehicle power supply authority.

Also, when a temporary start command is received from the user terminal device in which the vehicle control application is executed, the controller may control the operation of the vehicle based on the vehicle authority information stored in the storage unit.

In addition, the vehicle terminal device includes a storage unit, a display unit, a communication unit including a short-range wireless communication module for performing data communication with the user terminal device in a Bluetooth communication method, and a session connection with the user terminal device from the user terminal device When request information is received, a private key and a public key pair are generated, the generated public key is transmitted to the user terminal device through the communication unit, and a session key encrypted using the public key from the user terminal device and a controller for decrypting the session key using the private key and storing the decryption in the storage unit when is received. The control unit generates a random value, then encrypts the random value using the session key, controls the display unit to display user authentication information including the encrypted random value, and the user terminal When authentication data generated based on the user authentication information is received from the device, user authentication may be performed using a random value included in the authentication data and a random value included in the user authentication information.

The device further includes a security server generating a digital key and a user key, wherein the control unit uses the session key when the user authentication is completed, using at least one of identification information of the vehicle terminal device, the random value, and an electronic signature. After encrypting the digital key request information including one, control the communication unit to transmit the encrypted digital key request information to the security server through the user terminal device, and the validity of the electronic signature from the user terminal device When the digital key response information generated by the verified security server is always encrypted with the session key of the user terminal device, the digital key certificate and digital key included in the digital key response information using the session key of the vehicle terminal device The key list may be decrypted and stored in the storage unit.

In addition, the control unit generates, according to the user key request, the user key request information including the data obtained by encrypting the random value and the public key received from the user terminal device, and the user key request information, and then through the user terminal device When the user key request information is transmitted to a security server, and user key response information encrypted in the security server that has performed validation of the electronic signature is received from the user terminal device, the user key is used using the private key After decrypting the user key included in the response information, the communication unit may be controlled to encrypt the user key with the public key of the user terminal device and transmit it to the user terminal device.

In addition, the user terminal device includes a communication unit for performing data communication with at least one of the vehicle terminal device and the security server, an input unit for receiving at least one of the user authentication information and a user command, and an execution screen of the vehicle control application. and a security module for storing a security key including at least one of a display unit for displaying, a user key for driving the vehicle, a session key, a private key, and a public key, and performing encryption and decryption using the security key, , when a user command is input while the execution screen of the vehicle control application is displayed, transmits a control command corresponding to the user command to the vehicle terminal device, and transmits encrypted or decrypted data through the security module to the vehicle terminal It may include a control unit for controlling the communication unit to transmit to at least one of a device and the security server.

In addition, the security server, a communication unit for performing data communication with the user terminal device, a digital key certificate and digital key list corresponding to the request information received from the user terminal device, and response data including at least one of the user key and a hardware security module unit for encrypting the generated response data and a controller for controlling the communication unit to transmit the encrypted response data to the user terminal device.

Meanwhile, according to another embodiment of the present invention, in a method of controlling a vehicle terminal device for controlling a user's vehicle driving, when an authentication request is received from a user terminal device in which a vehicle control application is executed, displaying user authentication information , receiving authentication data related to the user authentication information from the user terminal device, determining whether the user is in the vehicle based on the received authentication data, and when it is determined that the user is in the vehicle , controlling the operation of the vehicle based on the vehicle authority information of the user.

In addition, the user authentication information may include at least one of QR code and PIN code information.

In addition, the displaying may include generating a random value according to a vehicle control command of the user terminal device, and encrypting the random value using a session value included in the pre-stored terminal information of the user terminal device. Then, the user authentication information including the encrypted random value is displayed, and the determining includes: When authentication data generated based on the user authentication information is received from the user terminal device, the authentication data included in the authentication data is received. The random value and the random value included in the user authentication information are compared, and when the two random values match, it is determined that the user is in the vehicle, and the vehicle terminal device communicates with the user terminal device in a Bluetooth communication method. Data communication can be performed.

In the controlling of the operation of the vehicle, if it is determined that the user is in the vehicle, controlling the operation of the vehicle based on the previously stored vehicle authorization information, wherein the vehicle authorization information includes: , vehicle starting authority, and vehicle power supply authority may include at least one of.

In addition, the controlling the operation of the vehicle may include controlling the operation of the vehicle based on the previously stored vehicle authority information when a temporary start command is received from the user terminal device in which the vehicle control application is executed.

And, further comprising the step of connecting the session with the user terminal device, the step of connecting the session, when the request information for the session connection with the user terminal device is received from the user terminal device, a private key and a public key pair generating and transmitting the generated public key to the user terminal device. When a session key encrypted using the public key is received from the user terminal device, the session key is decrypted and stored using the private key after generating a random value, encrypting the random value using the session key, displaying user authentication information including the encrypted random value, and authenticating the user from the user terminal device When the authentication data generated based on the information is received, the method may include performing user authentication using a random value included in the authentication data and a random value included in the user authentication information.

The method may further include registering a digital key and a user key, wherein when the user authentication is completed, the identification information of the vehicle terminal device, the random value, and the electronic signature using the session key are further included. Encrypting the digital key request information including at least one. Transmitting the encrypted digital key request information to the security server through the user terminal device, a digital key generated by the security server that performed validation of the electronic signature and encrypted with the session key of the user terminal device The method may include receiving response information and using a session key of the vehicle terminal device to decrypt and store a digital key certificate and a digital key list included in the digital key response information.

And, the step of registering, according to the user key request, the step of generating user key request information including the data and the digital signature by encrypting the random value and public key received from the user terminal device, the user terminal device Transmitting the user key request information to the security server through, receiving the encrypted user key response information from the user terminal device in the security server that has performed validation of the electronic signature, using the private key The method may further include decrypting the user key included in the user key response information, encrypting the user key with the public key of the user terminal device, and transmitting the encrypted message to the user terminal device.

In addition, the user terminal device stores a security key including at least one of a user key, a session key, a private key, and a public key for driving the vehicle through a security module, and performs encryption and decryption using the security key. When a user command is input while the execution screen of the vehicle control application is displayed, a control command corresponding to the user command is transmitted to the vehicle terminal device, and encrypted or decrypted data is transmitted through the security module. It may transmit to at least one of the vehicle terminal device and the security server.

The security server generates response data including at least one of a digital key certificate and a digital key list corresponding to the request information received from the user terminal device through a hardware security module unit, and a user key, and the generated The response data may be encrypted, and the encrypted response data may be transmitted to the user terminal device.

As described above, according to various embodiments of the present invention, in the vehicle operation control system of the present invention, the user performs additional additional manipulations through the user's vehicle boarding confirmation and vehicle use authority while the vehicle is started through the vehicle control application. It has the effect of making it possible to drive without it.

1 is a diagram of a vehicle operation control system according to an embodiment of the present invention;
2 is a flowchart of a session connection between a vehicle terminal device and a user terminal device in a vehicle driving control system according to an embodiment of the present invention;
3 and 4 are flowcharts for registering a key for vehicle use in a vehicle driving control system according to an embodiment of the present invention;
5 is a procedure diagram for using a vehicle in a vehicle driving control system according to an embodiment of the present invention;
6 is a block diagram of a vehicle terminal device according to an embodiment of the present invention;
7 is an exemplary view of authentication data stored in a storage unit of a vehicle terminal device according to an embodiment of the present invention;
8 is a block diagram of a user terminal device according to an embodiment of the present invention;
9 is a block diagram of a security server according to an embodiment of the present invention;
10 is a flowchart of a method for controlling a vehicle terminal device according to an embodiment of the present invention;
11 is a flowchart for session connection with a user terminal device in a vehicle terminal device according to an embodiment of the present invention;
12 is a flowchart of a method for registering a digital key and a user key in a vehicle terminal device according to an embodiment of the present invention.

Hereinafter, various embodiments of the present document will be described with reference to the accompanying drawings. However, this is not intended to limit the technology described in this document to a specific embodiment, and it should be understood that it includes various modifications, equivalents, and/or alternatives of the embodiments of this document. . In connection with the description of the drawings, like reference numerals may be used for like components.

In this document, expressions such as "have," "may have," "includes," or "may include" refer to the presence of a corresponding characteristic (eg, a numerical value, function, operation, or component such as a part). and does not exclude the presence of additional features.

In this document, expressions such as "A or B," "at least one of A or/and B," or "one or more of A or/and B" may include all possible combinations of the items listed together. . For example, "A or B," "at least one of A and B," or "at least one of A or B" means (1) includes at least one A, (2) includes at least one B; Or (3) it may refer to all cases including both at least one A and at least one B.

Expressions such as "first," "second," "first," or "second," used in this document may modify various elements, regardless of order and/or importance, and refer to one element. It is used only to distinguish it from other components, and does not limit the components.

A component (eg, a first component) is "coupled with/to (operatively or communicatively)" to another component (eg, a second component); When referring to "connected to", it will be understood that the certain element may be directly connected to the other element or may be connected through another element (eg, a third element). On the other hand, when it is said that a component (eg, a first component) is "directly connected" or "directly connected" to another component (eg, a second component), the component and the It may be understood that other components (eg, a third component) do not exist between other components.

The expression "configured to (or configured to)" as used in this document, depending on the context, for example, "suitable for," "having the capacity to ," "designed to," "adapted to," "made to," or "capable of." The term “configured (or configured to)” may not necessarily mean only “specifically designed to” in hardware. Instead, in some circumstances, the expression “a device configured to” may mean that the device is “capable of” with other devices or parts. For example, the phrase "a processor configured (or configured to perform) A, B, and C" refers to a dedicated processor (eg, an embedded processor) for performing the corresponding operations, or by executing one or more software programs stored in a memory device. , may mean a generic-purpose processor (eg, a CPU or an application processor) capable of performing corresponding operations.

The electronic device according to various embodiments of the present disclosure may include, for example, a smartphone, a tablet PC, a mobile phone, a video phone, an e-book reader, a desktop PC, a laptop PC, a netbook computer, a workstation, a server, a PDA, and a PMP. It may include at least one of a portable multimedia player, an MP3 player, a medical device, a camera, and a wearable device. A wearable device may be an accessory (e.g., watch, ring, bracelet, anklet, necklace, eyewear, contact lens, or head-mounted-device (HMD)), a textile or clothing integral (e.g. electronic garment); It may include at least one of a body mountable (eg skin pad or tattoo) or bioimplantable circuit In some embodiments, the electronic device may include, for example, a television, a digital video disk (DVD) player; Audio, refrigerator, air conditioner, vacuum cleaner, oven, microwave oven, washing machine, air purifier, set-top box, home automation control panel, security control panel, media box (eg Samsung HomeSyncTM, Apple TVTM, or Google TVTM), game console (eg, XboxTM, PlayStationTM), an electronic dictionary, an electronic key, a camcorder, or an electronic picture frame.

In another embodiment, the electronic device may include various medical devices (eg, various portable medical measuring devices (eg, a blood glucose monitor, a heart rate monitor, a blood pressure monitor, or a body temperature monitor), magnetic resonance angiography (MRA), magnetic resonance imaging (MRI), CT (computed tomography), imager, or ultrasound machine, etc.), navigation device, global navigation satellite system (GNSS), event data recorder (EDR), flight data recorder (FDR), automotive infotainment device, marine electronic equipment (e.g. navigation devices for ships, gyro compasses, etc.), avionics, security devices, head units for vehicles, industrial or household robots, drones, ATMs in financial institutions, point of sale (POS) in stores of sales) or IoT devices (eg, light bulbs, various sensors, sprinkler devices, fire alarms, thermostats, street lights, toasters, exercise equipment, hot water tanks, heaters, boilers, etc.).

In this document, the term user may refer to a person who uses an electronic device or a device (eg, an artificial intelligence electronic device) using the electronic device.

1 is a diagram of a vehicle operation control system according to an embodiment of the present invention.

As shown in FIG. 1 , the vehicle operation control system 1000 includes a vehicle terminal device 100 , a user terminal device 200 , and a security server 300 .

The vehicle terminal device 100 may be a device mounted in a vehicle to control the operation of the vehicle. For example, the vehicle terminal device 100 may display a navigation guide for guiding vehicle driving, provide a UI for adjusting the temperature of a vehicle interior, or provide a UI for outputting an in-vehicle audio.

In particular, the vehicle terminal device 100 determines whether the user is in the vehicle by performing data communication with the user terminal device 200 in a state in which the vehicle is temporarily started by the digital key installed in the smart phone remotely. When it is determined that the user is riding in the vehicle, the vehicle terminal device 100 determines the vehicle use authority of the user riding in the vehicle, and controls the operation of the vehicle based on the determined result.

For example, if it is determined that the user riding in the vehicle has the vehicle driving authority, the vehicle terminal device 100 changes the vehicle in the temporary starting state to the driving possible state. Meanwhile, if it is determined that the user riding in the vehicle does not have the vehicle driving authority, the vehicle terminal device 100 may maintain only a temporary start state.

The user terminal device 200 is a portable terminal device capable of short-range wireless communication with the vehicle terminal device 100 , and may be an electronic device such as a smart phone, a tablet PC, or a wearable device.

The user terminal device 200 transmits a vehicle start command to the vehicle terminal device 100 by performing data communication with the vehicle terminal device 100 according to a user command while the vehicle control application is running, or of door on/off command, etc. can be transmitted.

When the user authentication information output from the vehicle terminal device 100 is input, the user terminal device 200 generates authentication data based on the input user authentication information, and uses the generated authentication data to the vehicle terminal device 100 . send to

Accordingly, the vehicle terminal device 100 may determine whether the user is in the vehicle and the user's vehicle use right based on the authentication data received from the user terminal device 200 .

The security server 300 generates a digital key and a user key for controlling the operation of the vehicle in the user terminal device 200 (eg, remote starting of the vehicle) to generate the vehicle terminal device 100 and the user terminal device 200 . It can be a server that allocates

Specifically, when the initial user terminal device 200 is registered in the vehicle terminal device 100 , the user terminal device 200 requests the security server 300 to allocate a digital key and a user key. Accordingly, the security server 300 generates a paired digital key and a user key and transmits it to the user terminal device 200 , and the user terminal device 200 transmits the digital key received from the security server 300 to the vehicle terminal device. The user key transmitted to ( 100 ) and received from the security server ( 300 ) may be stored in the security area of the user terminal device ( 200 ).

As such, the vehicle terminal device 100 and the user terminal device 200 may perform the above-described operation after the digital key and the user key allocated from the security server 300 are stored.

Up to now, the system operation has been schematically described through each component constituting the vehicle driving control system 1000 according to the present invention. Hereinafter, an operation method of the vehicle driving control system 1000 according to the present invention will be described.

2 is a flowchart illustrating a session connection between a vehicle terminal device and a user terminal device in a vehicle driving control system according to an embodiment of the present invention, and FIGS. 3 and 4 are vehicle driving control according to an embodiment of the present invention It is a procedure diagram for registering a key for vehicle use in the system.

As shown in FIG. 2 , when a user command for Bluetooth communication connection is input, the user terminal device 200 in which the vehicle control application is installed is a pair of the vehicle terminal device 100 initially mounted in the vehicle for Bluetooth communication connection. Generates a public key and a private key of (S11, S12). However, the present invention is not limited thereto, and when a user command for Bluetooth communication connection is input from the user terminal device 200 in which the vehicle control application is installed, the vehicle terminal device 100 includes a pair of public and private keys (hereinafter referred to as the vehicle public key and vehicle private key) can be generated.

Thereafter, the vehicle terminal device 100 transmits the generated vehicle public key to the user terminal device 200 (S13). When the vehicle public key is received from the vehicle terminal device 100 , the user terminal device 200 generates a symmetric key for a session (hereinafter referred to as a session key), and uses the vehicle public key received from the vehicle terminal device 100 . After encrypting the session key, the encrypted session key is transmitted to the vehicle terminal device (S14, S15).

When the encrypted session key is received, the vehicle terminal device 100 decrypts the encrypted session key using the pre-generated vehicle private key, generates a random value, and encrypts the generated random value with the decrypted session key. (S16). Thereafter, the vehicle terminal device 100 generates user authentication information including an encrypted random value and displays it on the screen (S17). Here, the user authentication information may be a QR code or a PIN code.

When such user authentication information is displayed on the screen of the vehicle terminal device 100 , the user terminal device 200 receives the user authentication information displayed on the screen of the vehicle terminal device 100 ( S18 ).

Thereafter, the user terminal device 200 decrypts the input user authentication information using the pre-generated session key, encrypts the random value included in the decrypted user authentication information, and then authenticates the encrypted random value. Data is transmitted to the vehicle terminal device 100 (S19, S20).

Specifically, when a random value included in the decrypted user authentication information is obtained, the user terminal device 200 generates a pair of public and private keys (hereinafter, referred to as user public and private keys). Thereafter, the user terminal device 200 encrypts the randomly acquired value with the user private key, generates authentication data including the encrypted random value and the user public key, and transmits the generated authentication data to the vehicle terminal device 100 .

Accordingly, the vehicle terminal device 100 decrypts the encrypted random value using the user public key included in the authentication data, and then checks whether the decrypted random value matches the random value pre-generated in the vehicle terminal device 100 . It is determined whether or not the user is verified (S21). Through such user verification, the vehicle terminal device 100 may establish a session for Bluetooth communication with the user terminal device 200 .

When session establishment for Bluetooth communication connection between the vehicle terminal device 100 and the user terminal device 200 is completed, as shown in FIG. 3 , the vehicle terminal device 100 performs a session establishment process with the user terminal device 200 . The digital key request information is encrypted using the session key obtained by Escher (S30). Here, the digital key request information may include identification information (IAU ID) of the vehicle terminal device 100 , a random value, and an electronic signature.

When the digital key request information is encrypted, the vehicle terminal device 100 transmits the encrypted digital key request information to the user terminal device 200 , and the user terminal device 200 receives the received information from the vehicle terminal device 100 . The digital key request information is decrypted using the pre-stored session key (S31, S32). Thereafter, the user terminal device 200 transmits the public key for the digital key request to the security server 300 (S33). When the public key for the digital key request is received, the security server 300 generates a symmetric key for a session (hereinafter referred to as a server session key), and encrypts the pre-generated server session key using the public key to the user terminal device ( 200) (S34, S35).

When the encrypted server session key is received from the security server 300 , the user terminal device 200 decrypts the encrypted server session key using the private key paired with the public key transmitted to the security server 300 , and decrypts The digital key request information is encrypted using the server session key and transmitted to the security server 300 (S36, S37).

The security server 300 decrypts the digital key request information using the server session key, and then verifies the validity of the digital signature included in the decrypted digital key request information. When the validation is completed, the security server 300 transmits the digital key response information to the user terminal device 200 (S38 and S39). Here, the digital key response information may include a digital key certificate and digital key list encrypted using the vehicle public key, and an electronic signature using the server private key.

When the digital key response information is received from the security server 300 , the user terminal device 200 decrypts the digital key certificate and digital key list included in the digital key response information using the pre-stored server session key, and then the vehicle session The digital key certificate and digital key list are encrypted using the key (S40). Thereafter, the user terminal device 200 transmits the digital key response information including the digital key certificate encrypted with the vehicle session key, the digital key list, and the electronic signature to the vehicle terminal device 100 (S41).

When the digital key response information is received, the vehicle terminal device 100 verifies whether the data is valid by using the electronic signature included in the digital key response information, and when it is determined that there is validity, encryption using the vehicle private key The digital key certificate and digital key list are decrypted and stored (S42).

After the digital key certificate and the digital key list are registered in the vehicle terminal device 100 through this series of processes, the vehicle terminal device 100 receives the user key from the user terminal device 200 as shown in FIG. 4 . When the request is received, the user key request information is generated and transmitted to the user terminal device 200 (S50 to S52).

Specifically, the user terminal device 200 generates a random value and then encrypts it with a vehicle session key. Thereafter, the user terminal device 200 generates information including the encrypted random value and the vehicle public key, and then transmits the generated information to the vehicle terminal apparatus 200 . When such information is received, the vehicle terminal device 100 encrypts the received information with the server public key, digitally signs the encrypted information with the vehicle private key, and then receives the user key request information including the encrypted information and the electronic signature. may be generated and transmitted to the user terminal device 200 .

When user key request information is received from the vehicle terminal device 100 , the user terminal device 200 transmits the received user key request information to the security server 300 ( S53 ). Accordingly, the security server 300 encrypts the user key response information including the user key based on the received user key request information, and then transmits the encrypted user key response information to the user terminal device 200 (S54). , S55).

Specifically, when the user key request information is received, the security server 300 verifies whether the electronic signature included in the user key request information is valid. After completing validation of the electronic signature, the security server 300 decrypts the encrypted information included in the user key request information with the server private key. Thereafter, the security server 300 allocates a user key based on the decrypted information, and encrypts the allocated user key with the vehicle public key. In addition, the security server 300 digitally signs the encrypted user key with the vehicle private key. Thereafter, the security server 300 generates user key response information including the encrypted user key and the electronic signature and transmits the generated user key response information to the user terminal device 200 .

The user terminal device 200 transmits the user key response information received from the security server 300 to the vehicle terminal device 100 (S56). When the user key response information is received, the vehicle terminal device 100 decrypts the encrypted user key included in the user key response information, then encrypts the decrypted user key with the user public key and transmits it to the user terminal device 200 . (S57, S58). Accordingly, the user terminal device 200 decrypts the user key received from the vehicle terminal device 100 with the user private key, and then stores the decrypted user private key (S59).

Specifically, when the user key response information is received, the vehicle terminal device 100 determines whether the electronic signature included in the received user key response information is valid using the server public key. When the validation of the electronic signature is completed, the vehicle terminal device 100 decrypts the user key encrypted with the vehicle private key, then encrypts the user key decrypted with the user public key and transmits it to the user terminal device 200 . Accordingly, the user terminal device 200 may store the decrypted user key after decrypting the encrypted user key with the user private key.

So far, a method for registering a key for vehicle use in the vehicle terminal device 100 and the user terminal device 200 of the vehicle driving control system 1000 according to the present invention has been described. Hereinafter, a method for using a vehicle in the vehicle driving control system 1000 according to the present invention will be described in detail.

5 is a flowchart for using a vehicle in a vehicle driving control system according to an embodiment of the present invention.

5 , the user terminal device 200 executes a vehicle control application according to a user command. When a user command is input while the vehicle control application is running, the user terminal device 200 transmits a vehicle control command corresponding to the input user command to the vehicle terminal device 100 through the Bluetooth communication method (S60).

Here, the vehicle control command may include a user key previously registered in the user terminal device 200 . For example, when a user command for opening a vehicle door is input, the user terminal device 200 transmits a vehicle control command including a vehicle door open command and a user key to the vehicle terminal device 100 . As another example, when a user command for starting the vehicle is input, the user terminal device 200 transmits a vehicle control command including the temporary starting command and the user key to the vehicle terminal device 100 .

When such a vehicle control command is received, the vehicle terminal device 100 determines the user's right to use the vehicle by using the user key included in the received vehicle control command ( S61 ). According to an embodiment, the vehicle terminal device 100 may determine whether the user has the vehicle driving authority, the vehicle starting authority, or the vehicle power supply authority by using the user key.

As a result of the determination, when the user has the authority to supply power to the vehicle or a separate authority is not set, the vehicle terminal device 100 does not perform a series of operations to be described later. On the other hand, as a result of the determination, when the user has the vehicle driving authority or the vehicle starting authority, the vehicle terminal device 100 opens the vehicle door based on the received vehicle control command or integrates the vehicle to perform a temporary start of the vehicle. A control command may be transmitted to a control device (not shown).

After determining the vehicle use right, the vehicle terminal device 100 generates a random value, encrypts the random value using a pre-stored vehicle session key, and then displays user authentication information including the encrypted random value on the screen. is displayed in (S62).

Here, the user authentication information may be a QR code or a PIN code.

When such user authentication information is displayed, the user terminal device 200 receives the displayed user authentication information through the vehicle terminal device 100 (S63). As described above, if the user authentication information is a QR code, the user terminal device 200 may receive the user authentication information through image information captured through the camera, and if the user authentication information is a PIN code, PIN information from the user can be input.

When the user authentication information is input, the user terminal device 200 decrypts a random value included in the user authentication information by using the user session key (S64). Thereafter, the user terminal device 200 encrypts the decrypted random value and the electronic signature using the user session key, and then generates authentication data in which the random value and the electronic signature are encrypted and transmits it to the vehicle terminal device 100 ( S64, S65).

When the authentication data is received from the user terminal device 200, the vehicle terminal device 100 performs user verification based on the received authentication data (S66). Specifically, when the authentication data is received, the vehicle terminal device 100 decrypts the authentication data using the vehicle session key, and then determines whether the digital signature included in the decrypted authentication data is valid. When the validation is completed, the vehicle terminal device 100 may perform user verification through whether the random value initially transmitted to the user terminal device 200 matches the random value included in the decrypted authentication data. ( S67)

Here, the user verification may be to determine whether the user with the smart key is in the vehicle. Accordingly, when the two random values match, the vehicle terminal device 100 may determine that the user with the smart key is in the vehicle.

When the user verification is completed, the vehicle terminal device 100 makes a request to the integrated vehicle control device (not shown) to perform an operation corresponding to the vehicle use right of the user obtained through the above-described process (S68).

As described above, if the user has the vehicle driving authority, the vehicle terminal device 100 may request the integrated vehicle control device (not shown) to operate the vehicle in a drivable state. On the other hand, if the user has the authority to start the vehicle, the vehicle terminal device 100 may request the vehicle integrated control device (not shown) to maintain the vehicle in a temporary starting state.

Hereinafter, each configuration of the vehicle operation control system according to the present invention will be described in detail.

6 is a block diagram of a vehicle terminal device according to an embodiment of the present invention.

As shown in FIG. 6 , the vehicle terminal device 100 includes a communication unit 110 , a display unit 120 , a storage unit 130 , and a control unit 140 .

The communication unit 110 includes a short-range wireless communication module 111 that performs data communication with the user terminal device 200 in a Bluetooth communication method.

The display unit 120 displays various UIs for controlling the operation of the vehicle air conditioner. In particular, the display unit 120 displays user authentication information for determining whether the user is in the vehicle. Here, the user authentication information may include at least one of QR code information and PIN code information.

The display unit 120 may be implemented as a liquid crystal display (LCD), an organic light emitting diode (OLED), or the like. In particular, the display unit 120 may be implemented in the form of a touch screen forming a mutually layered structure together with a touch input unit (not shown) that receives a user's touch command.

The storage unit 130 stores authentication data including various encryption-related keys for user authentication and vehicle use-related authority information of the user. Specifically, the storage unit 130 may store at least one of terminal information and vehicle authority information of the user terminal device 200 registered to use the digital key, and the user's digital key.

7 is an exemplary diagram of authentication data stored in a storage unit of a vehicle terminal device according to an embodiment of the present invention.

As shown in FIG. 7 , the authentication data 610 includes a period of use area including information on the validity period of the data key, a number of times of use area, a use area area, a permission setting area for the user's vehicle use, and an electronic signature area. can do.

Accordingly, the controller 140 to be described later may obtain a key for user authentication or determine the user's vehicle use-related authority with reference to the storage unit 130 in which authentication data is stored as shown in FIG. 7 .

Additionally, the storage unit 130 may further store an operation program for controlling the operation of the vehicle terminal device 100 . Here, when the vehicle terminal device 100 is turned on, the operation program may be a program that is read from the storage unit 130 and compiled to operate each component of the vehicle terminal device 100 . The storage unit 130 includes a ROM, a RAM, or a memory card (eg, SD card, memory stick), non-volatile memory, volatile memory, and hard disk removable/mountable to the vehicle terminal device 100 . It may be implemented as at least one of a drive (HDD) and a solid state drive (SSD).

The controller 140 controls the overall operation of each component constituting the vehicle terminal device 100 .

In particular, when the request information for session connection with the user terminal device 200 is received from the user terminal device 200 through the communication unit 110 in a Bluetooth communication method, the control unit 140 generates a private key and a public key pair, and , controls the communication unit 110 to transmit the generated public key to the user terminal device 200 .

Thereafter, when the session key encrypted using the public key is received from the user terminal device 200 , the controller 140 decrypts the session key using the private key and stores it in the storage unit 140 .

Meanwhile, the controller 140 generates a random value after decryption of the session key. Thereafter, the controller 140 encrypts a random value using the decrypted session key, and controls the display 120 to display user authentication information including the encrypted random value. Accordingly, the display unit 120 may display user authentication information including an encrypted random value, and the user terminal device 200 receives the displayed user authentication information and performs authentication based on the inputted user authentication information. After generating the data, it is transmitted to the vehicle terminal device 100 .

When such authentication data is received from the user terminal device 200 , the controller 140 performs user authentication using a random value included in the received authentication data and a random value included in the user authentication information.

When user authentication is completed, the controller 140 encrypts digital key request information including at least one of identification information, a random value, and an electronic signature of the vehicle terminal device 100 using a pre-stored session key. Thereafter, the controller 140 controls the communication unit 110 to transmit the encrypted digital key request information to the security server 300 through the user terminal device 200 . Accordingly, the communication unit 110 may transmit the encrypted digital key request information to the user terminal device 200 .

On the other hand, when the digital key response information generated by the security server 300 that has performed validation of the electronic signature from the user terminal device 200 is encrypted with the session key of the user terminal device 200 and received, The digital key certificate and digital key list included in the digital key response information are decrypted using the session key of the vehicle terminal device 100 and stored in the storage unit 130 .

Thereafter, when a user key request including a random value and a public key is received from the user terminal device 200 , the control unit 140 receives user key request information including encrypted data and an electronic signature of the received random value and the public key. to create Thereafter, the controller 140 controls the communication unit 110 to transmit the user key request information to the security server 300 through the user terminal device 200 . Accordingly, the communication unit 110 may transmit the user key request information to the user terminal device 200 .

On the other hand, when the user key response information encrypted by the security server 300 that has performed validation of the electronic signature is received from the user terminal device 200, the control unit 140 includes the user key response information using the private key. Decrypt the user key. Thereafter, the controller 140 encrypts the user key with the public key of the user terminal device 200 , and then controls the communication unit 110 to transmit the encrypted user key to the user terminal device 200 . Accordingly, the communication unit 110 may transmit the encrypted user key to the user terminal device 200 , and the user terminal device 200 may store the encrypted user key after decrypting it with the private key.

Through this processing process, the vehicle terminal device 100 and the user terminal device 200 may process the registration of a key for vehicle use. After the key registration is completed, the controller 140 performs user authentication through the following embodiment, and then performs an operation corresponding to the user's vehicle use right.

Specifically, the controller 140 generates a random value according to the vehicle control command of the user terminal device 200 , and uses a session value included in the pre-stored terminal information of the user terminal device 200 to the random value. to encrypt Thereafter, the controller 140 controls the display unit to display user authentication information including an encrypted random value.

Accordingly, the display unit 120 may display user authentication information including an encrypted random value, and when the displayed user authentication information is input, the user terminal device 200 performs authentication based on the input user authentication information. After generating the data, the generated authentication data is transmitted to the vehicle terminal device 100 .

Accordingly, when authentication data is received from the user terminal device 200 through the communication unit 110 , the control unit 140 compares a random value included in the authentication data with a random value included in the user authentication information, so that the two random values are If they match, it is determined that the user is in the vehicle.

Thereafter, when it is determined that the user is in the vehicle, the controller 140 controls the operation of the vehicle based on the user's vehicle authority information stored in the storage unit 130 . Here, the vehicle authority information may include at least one of a vehicle driving authority, a vehicle starting authority, and a vehicle power supply authority.

8 is a block diagram of a user terminal device according to an embodiment of the present invention.

As shown in FIG. 8 , the user terminal device 200 is a portable terminal device such as a smart phone, a tablet, or a wearable device, and includes a communication unit 210 , an input unit 220 , a photographing unit 230 , and a display unit 240 . ), a storage unit 250 and a control unit 260 .

The communication unit 210 performs data communication with at least one of the vehicle terminal device 100 and the security server 300 . According to an exemplary embodiment, the communication unit 210 includes a wireless communication module such as a short-range communication module and a wireless LAN module, a High-Definition Multimedia Interface (HDMI), a Universal Serial Bus (USB), and an Institute of Electrical and Eletronics Engineers (IEEE) 1394 It may include a connector including at least one of wired communication modules such as

The short-range communication module is configured to perform short-range communication wirelessly with the user terminal device 100 and the vehicle terminal device 100 located in a short distance. The short-distance communication module may include at least one of a Bluetooth module, an infrared data association (IrDA) module, a near field communication (NFC) module, a WIFI module, and a Zigbee module. .

In addition, the wireless communication module is a module for performing data communication with the security server 300 by being connected to an external network according to a wireless communication protocol such as IEEE. In addition, the wireless communication module is a mobile communication that performs communication by accessing a mobile communication network according to various mobile communication standards such as 3G to 5G (3rd to 5th generation), 3GPP (3rd Generation Partnership Project), and LTE (Long Term Evoloution). It may further include a module.

As such, the communication unit 210 may be implemented by the various short-distance communication methods described above, and other communication technologies not mentioned herein may be employed as needed.

On the other hand, the connector is a configuration that provides an interface with various source devices such as USB 2.0, USB 3.0, HDMI, IEEE 1394, and the like. Such a connector may receive content data transmitted from a content providing server (not shown) through a wired cable connected to the connector according to a control command of the controller 260, which will be described later, or transmit pre-stored content data to an external recording medium. . Also, the connector may receive power from a power source through a wired cable physically connected to the connector.

The input unit 220 is an input unit for receiving various user commands and transmitting them to the control unit 260 to be described later. In particular, the input unit 220 receives at least one of user authentication information and a user command. Here, if the user authentication information is PIN code information, the input unit 220 may receive input through a manipulation unit (not shown) implemented as a keypad having various function keys, number keys, special keys, character keys, and the like. have. In addition, the input unit 220 may include a microphone (not shown) for receiving a user's voice command, a touch input unit (not shown) for receiving a user's touch command through the display unit 240 to be described later.

The photographing unit 230 is a means for photographing an image. In particular, when the user authentication information displayed on the vehicle terminal device 100 is QR code information, the photographing unit 230 may photograph the user authentication information displayed on the vehicle terminal device 100 and receive the input.

The display unit 240 displays various contents and an execution UI of a pre-registered application. In particular, the display unit 240 may display an execution screen of the vehicle control application. The display unit 240 may be implemented as a liquid crystal display (LCD), an organic light emitting diode (OLED), or the like. In particular, the display unit 240 may be implemented in the form of a touch screen forming a mutually layered structure together with a touch input unit (not shown) that receives a user's touch command as described above.

The storage unit 250 stores a variety of various contents and authentication-related information. In particular, the storage unit 250 may separately include a security area to store a user key for user authentication through the vehicle terminal device 100 . Here, the security area may be physically implemented by applying a TEE-based mobile security technology, or may be implemented as a virtual security area using software by applying a WBC-based mobile security technology. In addition, the storage unit 250 may further store an operation program for controlling the operation of the user terminal device 200 . Here, when the user terminal device 200 is turned on, the operation program may be a program that is read from the storage unit 250 and compiled to operate each component of the user terminal device 200 . The storage unit 250 includes a ROM, a RAM, or a memory card (eg, SD card, memory stick), non-volatile memory, volatile memory, and hard disk removable/mountable to the user terminal device 200 . It may be implemented as at least one of a drive (HDD) and a solid state drive (SSD).

The controller 260 controls the overall operation of each component constituting the user terminal device 200 . In particular, the control unit 260 stores a security key including at least one of a user key, a session key, a private key, and a public key for vehicle operation in the storage unit 250, and performs encryption and decryption using the security key. It may include a security module 261 that

When a user command is input while the execution screen of the vehicle control application is displayed through the display unit 240 , the control unit 260 transmits a control command corresponding to the user command to the vehicle terminal device 100 , The communication unit 210 is controlled to transmit the encrypted or decrypted data through the module 261 to at least one of the vehicle terminal device 100 and the security server 300 .

9 is a block diagram of a security server according to an embodiment of the present invention.

As shown in FIG. 9 , the security server 300 includes a communication unit 310 , a control unit 320 , and a hardware security module unit 330 .

The communication unit 310 performs data communication with the user terminal device 200 through a wireless communication module.

The control unit 320 controls the overall operation of each component constituting the security server 300 . In particular, the control unit 320 controls the communication unit 310 to transmit the encrypted response data to the user terminal device 200 through the hardware security module unit 330, which will be described later.

The hardware security module unit 330 generates response data including at least one of a digital key certificate and a digital key list corresponding to the request information received from the user terminal device 200 and the user key, and transmits the generated response data. Encrypt.

Specifically, when the encrypted digital key request information is received from the user terminal device 200 , the hardware security module unit 330 decrypts the digital key request information using the server session key. Thereafter, the hardware security module unit 330 verifies the validity of the digital signature included in the decrypted digital key request information. When validation is completed, the hardware security module unit 330 generates digital key response information including an encrypted digital key certificate and digital key list using the vehicle public key, and an electronic signature using the server private key, and the user terminal device (200).

Accordingly, the user terminal device 200 re-encrypts the digital key response information received from the vehicle terminal device 100 and transmits it to the vehicle terminal device 100 , and the vehicle terminal device 100 receives the digital key response information After verifying whether the data is valid using the electronic signature included in the , if it is determined that there is validity, the encrypted digital key certificate and digital key list can be decrypted and stored using the vehicle private key.

Meanwhile, when the user key request information is received from the user terminal device 200 , the hardware security module unit 330 verifies whether the electronic signature included in the user key request information is valid. After completing validation of the electronic signature, the hardware security module unit 330 decrypts the encrypted information included in the user key request information with the server private key. Thereafter, the hardware security module unit 330 allocates a user key based on the decrypted information, and encrypts the allocated user key with the vehicle public key. In addition, the hardware security module unit 330 digitally signs the encrypted user key with the vehicle private key. Thereafter, the hardware security module unit 330 generates user key response information including the encrypted user key and the electronic signature and transmits the generated user key response information to the user terminal device 200 .

Accordingly, the user terminal device 200 transmits the user key response information received from the security server 300 to the vehicle terminal device 100, and the vehicle terminal device 100 encrypts the user key response information included in the received user key response information. After decrypting the user key, the user key decrypted with the user public key is encrypted and transmitted to the user terminal device 200 . Accordingly, the user terminal device 200 may decrypt the user key received from the vehicle terminal device 100 with the user private key, and then store the decrypted user private key.

Up to now, each configuration constituting the vehicle operation control system according to the present invention has been described in detail. Hereinafter, a control method of the vehicle terminal device 100 for a user's vehicle driving control according to the present invention will be described in detail.

10 is a flowchart of a method for controlling a vehicle terminal device according to an embodiment of the present invention.

As shown in FIG. 10 , the first vehicle terminal device 100 establishes a session connection with the user terminal device 200 using a Bluetooth communication method ( S1010 ). Accordingly, the vehicle terminal device 100 and the user terminal device 200 may generate and register and store a session key for Bluetooth communication connection. The vehicle terminal device 100 may perform a session connection with the user terminal device 200 through FIG. 11 to be described later.

11 is a flowchart for session connection with a user terminal device in a vehicle terminal device according to an embodiment of the present invention.

11 , when the vehicle terminal device 100 receives request information for session connection with the user terminal device 200 from the user terminal device 200, it generates a private key and a public key pair, and generates The public key is transmitted to the user terminal device 200 (S1110, S1120).

Thereafter, when the session key encrypted using the public key is received from the user terminal device 200 , the vehicle terminal device 100 decrypts and stores the session key using the private key ( S1130 and S1140 ).

Thereafter, the vehicle terminal device 100 generates a random value, encrypts the random value using the session key, and displays user authentication information including the encrypted random value ( S1150 and S1160 ). Here, the user authentication information may include at least one of QR code information and PIN code information.

Thereafter, when authentication data generated based on user authentication information is received from the user terminal device 200 , the vehicle terminal device 100 uses a random value included in the authentication data and a random value included in the user authentication information to obtain a user Authentication is performed (S1170).

When user authentication is completed, a session for Bluetooth communication connection between the vehicle terminal device 100 and the user terminal device 200 is established. When the session is connected, the vehicle terminal device 100 registers a digital key and a user key (S1020). The vehicle terminal device 100 may register a digital key and a user key through FIG. 12 to be described later.

12 is a flowchart of a method for registering a digital key and a user key in a vehicle terminal device according to an embodiment of the present invention.

As shown in FIG. 12 , the vehicle terminal device 100 encrypts digital key request information including at least one of identification information of the vehicle terminal device, the random value, and the electronic signature using the session key, and then the user terminal The device 200 transmits the encrypted digital key request information to the security server 300 (S1210).

Thereafter, the vehicle terminal device 100 receives digital key response information encrypted with the session key of the user terminal device 200 from the user terminal device 200 ( S1220 ). Here, the digital key response information may be information generated by the security server 300 that has performed validation of the electronic signature.

When the encrypted digital key response information is received, the vehicle terminal device 100 uses the session key of the vehicle terminal device 100 to decrypt and store the digital key certificate and digital key list included in the digital key response information (S1230). ).

Thereafter, when a user key request is received from the user terminal device 200 , the vehicle terminal device 100 requests a user key including data obtained by encrypting a random value and a public key received from the user terminal device 200 and an electronic signature. After generating the information, the generated user key request information is transmitted to the security server 300 through the user terminal device 200 (S1240).

Thereafter, when the encrypted user key response information is received from the user terminal device 200, the vehicle terminal device 100 decrypts the user key included in the user key response information using the private key (S1250, S1260) where , the encrypted user key response information may be information generated by the security server 300 that has performed validation of the electronic signature.

Thereafter, the vehicle terminal device 100 encrypts the password with the public key of the user terminal device 200 , and then transmits the encrypted user key to the user terminal device 200 ( S1270 ). Accordingly, the user terminal device 200 may decrypt the user key received from the vehicle terminal device 100 with the private key, and then register and store the decrypted user key.

In a state in which the digital key is registered in the vehicle terminal device 100 and the user key is registered in the user terminal device 200 through this series of processes, the vehicle terminal device 100 is the user terminal in which the vehicle control application is executed. When an authentication request is received from the device 200, user authentication information is displayed (S1030). Here, the user authentication information includes an encrypted random value, and may be implemented as at least one of a QR code and a PIN code.

Specifically, the vehicle terminal device 100 generates a random value according to the vehicle control command of the user terminal device 200, encrypts the random value using the session value included in the pre-stored terminal information, User authentication information including an encrypted random value may be displayed.

Accordingly, when the user authentication information displayed on the vehicle terminal device 100 is input, the user terminal device 200 obtains a random value included in the input user authentication information, and generates authentication data including the obtained random value. and transmits it to the vehicle terminal device 100 .

Accordingly, when authentication data related to user authentication information is received from the user terminal device 200 , the vehicle terminal device 100 determines whether the user is in the vehicle based on the received authentication data (S1040 and S1050).

Specifically, when authentication data generated based on user authentication information is received from the user terminal device 200, the vehicle terminal device 100 compares a random value included in the authentication data with a random value included in the user authentication information, , if the two random values match, it is determined that the user is in the vehicle.

Thereafter, when it is determined that the user is in the vehicle, the vehicle terminal device 100 controls the operation of the vehicle based on the vehicle authority information of the user ( S1060 ). Here, the vehicle authority information may include at least one of a vehicle driving authority, a vehicle starting authority, and a vehicle power supply authority. Specifically, when it is determined that the user is in the vehicle, the vehicle terminal device 100 may control the operation of the vehicle based on pre-stored vehicle authority information.

For example, if the user has the vehicle driving authority, the vehicle terminal device 100 may request the vehicle to operate in a drivable state from an integrated vehicle control device (not shown). On the other hand, if the user has the authority to start the vehicle, the vehicle terminal device 100 may request the vehicle integrated control device (not shown) to maintain the vehicle in a temporary starting state.

Meanwhile, the control method of the vehicle terminal device 100 according to the above-described various embodiments may be coded with software and stored in a non-transitory readable medium. Such a non-transitory readable medium may be mounted on various devices and used.

The non-transitory readable medium refers to a medium that stores data semi-permanently, rather than a medium that stores data for a short moment, such as a register, cache, memory, and the like, and can be read by a device. Specifically, it may be a CD, DVD, hard disk, Blu-ray disk, USB, memory card, ROM, or the like.

In addition, although preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above, and the technical field to which the present invention belongs without departing from the gist of the present invention as claimed in the claims In addition, various modifications are possible by those of ordinary skill in the art, and these modifications should not be individually understood from the technical spirit or perspective of the present invention.

100: vehicle terminal device 110,210,310: communication unit
111: short-range wireless communication module 120,240: display unit
130,250: storage unit 140,260,320: control unit
200: user terminal device 220: input unit
230: photographing unit 261: security module
300: security server 330: hardware security module unit

Claims (20)

In the vehicle operation control system,
a vehicle terminal device mounted inside the vehicle and configured to determine whether the user is in the vehicle through user authentication information; and
a user terminal device that controls the operation of the vehicle through a vehicle control application, and when the user authentication information is input, generates authentication data related to the user authentication information and transmits it to the vehicle terminal device;
The vehicle terminal device,
The user authentication information is displayed according to the authentication request of the user terminal device, and when it is determined that the user is in the vehicle based on the authentication data received from the user terminal device, based on the vehicle authority information of the user Vehicle operation control system, characterized in that for controlling the operation of the vehicle. The method of claim 1,
The user authentication information is
A vehicle operation control system comprising at least one of QR code and PIN code information. 3. The method of claim 2,
The vehicle terminal device,
a communication unit including a short-range wireless communication module for performing data communication with the user terminal device in a Bluetooth communication method;
a storage unit for storing at least one of terminal information and vehicle authorization information of a user terminal device registered for using a digital key, and a digital key of a user;
a display unit for displaying the user authentication information; and
After generating a random value according to a vehicle control command of the user terminal device, encrypting the random value using a session value included in the terminal information, the user authentication information including the encrypted random value Controls the display unit to display
When authentication data generated based on the user authentication information is received from the user terminal device through the communication unit, a random value included in the authentication data is compared with a random value included in the user authentication information, and the two random values are a control unit that determines that the user is in the vehicle if they match;
A vehicle operation control system comprising a. 4. The method of claim 3,
The control unit is
When it is determined that the user is in the vehicle, the operation of the vehicle is controlled based on the vehicle authority information stored in the storage unit,
The vehicle permission information is
A vehicle driving control system comprising at least one of a vehicle driving right, a vehicle starting right, and a vehicle power supply right. 4. The method of claim 3,
The control unit is
When a temporary start command is received from the user terminal device in which the vehicle control application is executed, the vehicle operation control system according to claim 1 , wherein the operation of the vehicle is controlled based on the vehicle authority information stored in the storage unit. 4. The method of claim 3,
The vehicle terminal device,
storage;
display unit;
a communication unit including a short-range wireless communication module for performing data communication with the user terminal device in a Bluetooth communication method; and
When the request information for session connection with the user terminal device is received from the user terminal device, a private key and a public key pair are generated, and the generated public key is transmitted to the user terminal device through the communication unit,
When the session key encrypted using the public key is received from the user terminal device, the control unit decrypts the session key using the private key and stores it in the storage unit;
The control unit is
After generating a random value, the random value is encrypted using the session key, and the display unit is controlled to display user authentication information including the encrypted random value,
When authentication data generated based on the user authentication information is received from the user terminal device, user authentication is performed using a random value included in the authentication data and a random value included in the user authentication information Vehicle operation control system. 7. The method of claim 6,
It further includes; a security server that generates a digital key and a user key,
The control unit is
When the user authentication is completed, digital key request information including at least one of the identification information of the vehicle terminal device, the random value, and the electronic signature is encrypted using the session key, and then the security is performed through the user terminal device. Controls the communication unit to transmit the encrypted digital key request information to a server,
When the digital key response information generated from the security server that has performed validation of the electronic signature from the user terminal device is always encrypted with the session key of the user terminal device, the digital key response information is received using the session key of the vehicle terminal device The vehicle operation control system, characterized in that the digital key certificate and digital key list included in the key response information are decoded and stored in the storage unit. 8. The method of claim 7,
The control unit is
In response to a user key request, after generating user key request information including encrypted data and digital signature of a random value and a public key received from the user terminal device, the user key is transmitted to the security server through the user terminal device Send request information;
When the user key response information encrypted by the security server that has performed validation of the electronic signature is received from the user terminal device, after decrypting the user key included in the user key response information using the private key, The vehicle operation control system according to claim 1, wherein the communication unit controls the communication unit to be encrypted with the public key of the user terminal device and transmitted to the user terminal device. 9. The method of claim 8,
The user terminal device,
a communication unit configured to perform data communication with at least one of the vehicle terminal device and the security server;
an input unit for receiving at least one of the user authentication information and a user command;
a display unit for displaying an execution screen of the vehicle control application;
and a security module that stores a security key including at least one of a user key, a session key, a private key, and a public key for driving the vehicle, and performs encryption and decryption using the security key,
When a user command is input while the execution screen of the vehicle control application is displayed, a control command corresponding to the user command is transmitted to the vehicle terminal device, and data encrypted or decrypted through the security module is transmitted to the vehicle terminal device and a control unit for controlling the communication unit to transmit to at least one of the security server.
A vehicle operation control system comprising a. 10. The method of claim 9,
The security server,
a communication unit for performing data communication with the user terminal device;
a hardware security module unit for generating response data including at least one of a digital key certificate and a digital key list corresponding to the request information received from the user terminal device, and a user key, and encrypting the generated response data; and
a control unit controlling the communication unit to transmit the encrypted response data to the user terminal device;
A vehicle operation control system comprising a. A method of controlling a vehicle terminal device for a user's vehicle driving control, the method comprising:
displaying user authentication information when an authentication request is received from the user terminal device in which the vehicle control application is executed;
receiving authentication data related to the user authentication information from the user terminal device;
determining whether the user is in a vehicle based on the received authentication data; and
controlling the operation of the vehicle based on the user's vehicle authority information when it is determined that the user is in the vehicle;
A control method of a vehicle terminal device comprising a. 12. The method of claim 11,
The user authentication information is
A control method of a vehicle terminal device comprising at least one of QR code and PIN code information. 13. The method of claim 12,
The displaying step is
A random value is generated according to a vehicle control command of the user terminal device, the random value is encrypted using the session value included in the pre-stored terminal information of the user terminal device, and then the encrypted random value is generated. Display the user authentication information including,
The determining step is
When authentication data generated based on the user authentication information is received from the user terminal device, a random value included in the authentication data is compared with a random value included in the user authentication information, and if the two random values match, the It is determined that the user is in the vehicle,
The vehicle terminal device,
A method of controlling a vehicle terminal device, characterized in that the data communication is performed with the user terminal device in a Bluetooth communication method. 14. The method of claim 13,
The step of controlling the operation of the vehicle comprises:
When it is determined that the user is riding in the vehicle, the operation of the vehicle is controlled based on the pre-stored vehicle authority information,
The vehicle permission information is
A control method of a vehicle terminal device, comprising at least one of a vehicle driving right, a vehicle starting right, and a vehicle power supply right. 14. The method of claim 13,
The step of controlling the operation of the vehicle comprises:
When a temporary start command is received from the user terminal device in which the vehicle control application is executed, the control method of the vehicle terminal device, characterized in that the control method of the vehicle based on the previously stored vehicle authority information. 14. The method of claim 13,
It further comprises; connecting the session with the user terminal device,
The step of connecting the session is
generating a private key and a public key pair when receiving request information for session connection with the user terminal device from the user terminal device, and transmitting the generated public key to the user terminal device;
when receiving the session key encrypted using the public key from the user terminal device, decrypting and storing the session key using the private key;
after generating a random value, encrypting the random value using the session key, and displaying user authentication information including the encrypted random value; and
when authentication data generated based on the user authentication information is received from the user terminal device, performing user authentication using a random value included in the authentication data and a random value included in the user authentication information;
A control method of a vehicle terminal device comprising a. 17. The method of claim 16,
Further comprising; registering a digital key and a user key;
The registration step is
encrypting digital key request information including at least one of identification information of the vehicle terminal device, the random value, and an electronic signature by using the session key when the user authentication is completed;
transmitting the encrypted digital key request information to a security server through the user terminal device;
receiving digital key response information generated by the security server that has verified the validity of the electronic signature and encrypted with the session key of the user terminal device; and
Decrypting and storing a digital key certificate and a digital key list included in the digital key response information using the session key of the vehicle terminal device;
A control method of a vehicle terminal device comprising a. 18. The method of claim 17,
The registration step is
generating, according to a user key request, user key request information including data obtained by encrypting a random value and a public key received from the user terminal device, and an electronic signature;
transmitting the user key request information to the security server through the user terminal device;
receiving, from the user terminal device, user key response information encrypted by the security server that has performed validation of the electronic signature;
decrypting the user key included in the user key response information using the private key; and
encrypting the password with the public key of the user terminal device and transmitting it to the user terminal device;
The control method of the vehicle terminal device, characterized in that it further comprises. The method of claim 18,
The user terminal device,
stores a security key including at least one of a user key, a session key, a private key, and a public key for driving the vehicle through a security module, and performs encryption and decryption using the security key,
When a user command is input while the execution screen of the vehicle control application is displayed, a control command corresponding to the user command is transmitted to the vehicle terminal device, and data encrypted or decrypted through the security module is transmitted to the vehicle terminal device And The control method of the vehicle terminal device, characterized in that the transmission to at least one of the security server. 20. The method of claim 19,
The security server,
Generates response data including at least one of a digital key certificate and a digital key list corresponding to the request information received from the user terminal device through a hardware security module unit, and a user key, and encrypts the generated response data,
The control method of a vehicle terminal device, characterized in that transmitting the encrypted response data to the user terminal device.

Images