WO2017164494A1 - Procédé d'authentification d'utilisateur de terminal d'utilisateur accédant à un dispositif de contrôle d'accès, application pour le procédé, et serveur de distribution d'application dans lequel l'application est stockée - Google Patents

Procédé d'authentification d'utilisateur de terminal d'utilisateur accédant à un dispositif de contrôle d'accès, application pour le procédé, et serveur de distribution d'application dans lequel l'application est stockée Download PDF

Info

Publication number
WO2017164494A1
WO2017164494A1 PCT/KR2016/015359 KR2016015359W WO2017164494A1 WO 2017164494 A1 WO2017164494 A1 WO 2017164494A1 KR 2016015359 W KR2016015359 W KR 2016015359W WO 2017164494 A1 WO2017164494 A1 WO 2017164494A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
access
authentication
user terminal
access manager
Prior art date
Application number
PCT/KR2016/015359
Other languages
English (en)
Korean (ko)
Inventor
정지호
백영현
신요식
Original Assignee
주식회사 유니온커뮤니티
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 주식회사 유니온커뮤니티 filed Critical 주식회사 유니온커뮤니티
Publication of WO2017164494A1 publication Critical patent/WO2017164494A1/fr

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G06F21/35—User authentication involving the use of external additional devices, e.g. dongles or smart cards communicating wirelessly
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
    • G07C2009/00769—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00857—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed
    • G07C2009/00865—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed remotely by wireless communication

Definitions

  • the present invention relates to a user authentication method of a user terminal capable of controlling an access manager by communicating with an access manager, an application for the method, and an application distribution server storing the application.
  • the door locker installed in the door or the like is electrically controlled by the access manager, except that the door locker is manually controlled by a key or an external force of the user.
  • the access manager may be provided together with the door lock in one main body, but may be provided in an independent manner separated from the door lock to perform additional functions.
  • the plurality of access managers may be provided in the form of an access management system connected to an access management server through a network.
  • the access manager receives predetermined authentication information from the person who performs authentication (that is, determining whether the person is allowed to access), and opens the door or blocking rod only for the person who has successfully authenticated the person. For this purpose, the access manager must register and retain authentication information about an accessor who is allowed to access. Alternatively, the access management apparatus may be provided with pre-registered authentication information every time from the authentication server connected through a separate network without registering and managing the authentication information.
  • the access server may not perform the authentication process, and the authentication server may proceed with the authentication process.
  • the access manager receives the authentication information from the accessor, provides the server with the server, requests authentication approval, and performs access control such as door lock control according to the authentication result of the server.
  • the authentication method that can be used for accessor authentication, (1) using a magnetic card, RFID (Radio Frequency Identification), NFC (Near Field Communication), etc. by inputting a password (authentication code) from the user and compared with the registered password And (2) a method of extracting a feature point by obtaining an image of a fingerprint, an iris, a vein, a face, and the like from an accessor, and comparing the feature point with a pre-registered feature point (ie, registration authentication information). Therefore, if the access manager uses fingerprint authentication, it must have a fingerprint sensor in particular.
  • RFID Radio Frequency Identification
  • NFC Near Field Communication
  • the use of Bluetooth for access authentication.
  • To open the door using a smartphone normally (1) wake up the smartphone in the locked mode by pressing the home button, (2) enter the main screen by entering a password or secret pattern, and (3) an application related to door lock control ( Or simply run an app. (4) The user must enter a control command to open the door by pressing the open door icon.
  • the smart phone initiates the authentication process by providing a predetermined authentication code to the access manager via Bluetooth. While this method has the convenience of not having to hold a key, it still has the disadvantage of having to perform several steps and somewhat slow in time.
  • This invention authenticates using a smart card connected via Bluetooth, etc.
  • the present invention relates to a digital door lock to be performed, but the smart card used here is a dedicated device using power provided by the door lock device and is not based on a user terminal such as a smart phone.
  • An object of the present invention is to provide a user authentication method of a user terminal capable of controlling an access manager by a method of communicating with an access manager via Bluetooth communication, an application for the method, an application for the method, and an application distribution server storing the application. Is in.
  • Another object of the present invention is to operate an access control application without any other operation by operating an external button of a user terminal in a lock mode, and provide a user authentication process of a user terminal by providing authentication information to an access manager.
  • a method, an application for the method, and an application distribution server storing the application are provided.
  • the user terminal on which the user authentication method according to the present invention is performed basically has an operation mode divided into a lock mode and an activation mode, and operates according to a user control command input through a plurality of buttons and a touch panel.
  • the user terminal accesses the access manager that performs access control (and / or door opening) in a wireless communication manner to provide authentication information for user authentication to the access manager.
  • the characteristic user authentication method of the present invention is performed in the user terminal.
  • the access authentication unit of the user terminal starts operation by a user control command to store a mobile key to be used as the authentication information and wake up one of the plurality of buttons.
  • Setting to a button Entering the lock mode from the activation mode, turning off the screen of the user terminal and entering the access authentication unit in a backround operation state;
  • the lock mode confirming whether the wake-up button is operated by a user in a background operation state by the user;
  • the access authentication unit transmits the mobile key to the access manager so that the access manager performs user authentication.
  • the access manager provided with the mobile key as the authentication information performs user authentication according to its own user authentication algorithm and performs access control according to the result.
  • the receiving of the authentication result may include: when the reception strength of the broadcasting signal is greater than or equal to a predetermined value even if the access manager receives a signal broadcast by the access manager within a predetermined time period,
  • the authentication unit transmits the mobile key to the access manager so as to request user authentication from the access manager, so that the user authentication can be performed when the access manager is located near the access manager.
  • the access authentication unit may switch from the background operation state to the activation operation state even before the user terminal is switched to the activation mode.
  • the access key stores the mobile key as the authentication information
  • the access authentication unit requests a mobile key through a user registration process by accessing a separate mobile server
  • the mobile terminal may be issued by the access authentication unit through the step of receiving the mobile key newly issued and provided by the mobile server according to the mobile key request.
  • the user authentication in the step of receiving the authentication result is performed by a method of checking whether the mobile key transmitted from the access authentication unit to the access manager is the same as or matched with the registered mobile key previously owned by the access manager.
  • the registration mobile key owned by the access manager may be provided to the access manager after a separate management server managing a registered user receives and registers the mobile key issued by the mobile server from the mobile server.
  • the present invention extends to an application written in a program language executable in a computer device such as the user terminal in order to execute each step of the user authentication method.
  • the present invention also extends to an application distribution server comprising a computer-readable recording medium storing the above applications and allowing the application to be downloaded when the user terminal is connected through the Internet.
  • the user authentication process with the access manager can be performed only by operating an external input button (wake-up button).
  • the access manager performs the door opening control, the user can quickly perform the door opening operation with a minimum of simple operations.
  • FIG. 1 is a block diagram of an access management system according to an embodiment of the present invention.
  • FIG. 2 is a block diagram of a user terminal according to an embodiment of the present invention.
  • FIG. 3 is a flowchart provided to explain a user authentication method centering on a user terminal of the present invention.
  • the access control system of the present invention essentially includes an access manager 110 and a user terminal 130.
  • the system may have an additional configuration (management server, mobile server, etc.) for user registration, generating authentication information for a registered user, and the like.
  • FIG. 1 is an example.
  • the access management system 100 of FIG. 1 includes an access manager 110, a user terminal 130, a management server 150, and a mobile server 170 that control the door lock 10.
  • the connection between the access manager 110 and the management server 150, the connection between the user terminal 130 and the mobile server 170, and the connection between the management server 150 and the mobile server 170 is a mobile communication network (WCDMA) , LTE, etc.) is preferably connected to the IP (IP) network based on the LAN (LAN).
  • the access manager 110 and the user terminal 130 are connected to a local area network or an ultra short-range network such as IP network, Bluetooth, Zigbee, or the like.
  • the access manager 110 performs 'user authentication' to determine whether to allow the access of the accessor.
  • the access control unit 110 may be connected to the door lock 10 to control the opening and closing of the door lock 10, wherein the user authentication is the same as the access authentication.
  • the access manager 110 may be in the form of a door lock system, or may be in the form of a general access manager.
  • the access manager 110 compares the 'identification (ID)' provided from the person with the 'registration mobile key' based on whether the corresponding person is already an authorized person (hereinafter, registered user). Perform 'user authentication' to judge. As described below, the user must register himself with the system 100 in advance, and during the registration process, unique authentication information (hereinafter, referred to as a registered mobile key) for authentication of a 'registered user' is issued by the mobile server 170. .
  • the access manager 110 may have a plurality of registered mobile keys for a plurality of 'registered users', and compares the authentication information (eg, a mobile key) input from an accessor who wants to access with a plurality of registered mobile keys. It is managed by the method of determining whether there is the same or match.
  • the authentication information provided by the accessor may be the same as the registered mobile key, or may be in the form of matching with the registered mobile key by any condition.
  • the access control unit 110 has a Bluetooth interface (not shown) for connecting with the user terminal 130, a network interface (not shown) connected with the management server 150 for transmitting and receiving data, and the door lock ( 10 is provided with a door lock driving unit (not shown) capable of controlling.
  • the access controller 110 may have a door lock itself.
  • the access manager 110 includes a user authentication unit 111 for a characteristic operation of the present invention.
  • the user authentication unit 111 performs 'user authentication' by decrypting the encrypted authentication information provided by the user terminal 130 and comparing it with the registered mobile key. If the authentication is successful, the door lock driving unit (not shown) is performed. By controlling the door lock 10 to open the door, if the authentication fails, the authentication result is provided to the user terminal 130. In addition, the user authentication unit 111 provides the authentication result to the management server 150.
  • the management server 150 is connected to the access manager 110 and the mobile server 170 through the IP network.
  • the management server 150 stores a user information DB 151 for storing and managing information (including a registered mobile key) for the registered user, an access history of the registered user, and an authentication result for all authenticated users. It includes a history data DB 153 to manage, and a registration processing unit 155 for user registration.
  • the registration processing unit 155 stores and encrypts the mobile key in the user information DB 151 to the access manager 110. to provide.
  • the mobile server 170 proceeds with the user terminal 130 for the initial registration process for the user who wants to register, and issues a registered mobile key for the registered user to the user terminal 130 and the management server 150. do.
  • the mobile server 170 includes a mobile key issuing unit 171 which performs registration mobile key issuance when a user registration request (or mobile key issuance request) is received from the user terminal 130.
  • the user terminal 130 downloads an application for the operation of the present invention through a separate application distribution server 30 in a state having hardware means and software means for performing an operation other than the characteristic operation of the present invention.
  • Received 'additional' device may correspond to, for example, a mobile phone function through a 3G or 4G mobile phone network, an Internet phone function through an IP network, an Internet access function, a video / sound playback function, and the like.
  • the telephone function, the Internet function, and the like may be basically essential operations of the corresponding device.
  • the user terminal 130 is a device that is a user-like device that does not even have the application for the other operations described above, and is carried by the user, and the separate application distribution server 30 for the application for operation of the present invention. It can also be a device downloaded and installed as an 'additional'. Therefore, the dedicated terminal made for user authentication through the access manager 110 does not correspond to the user terminal 130 of the present invention.
  • the user terminal 130 has an operation mode divided into (1) 'lock mode' and (2) 'activation mode'.
  • the lock mode is a state in which the screen is turned off for power saving and the like, and only an input for switching to the activation mode is operated without a control input through a screen touch.
  • the input for switching may be an operation of an external button.
  • the software button may be operated when a part of the screen is set as a software button while the main screen is turned off. . Therefore, before the application for the present invention is installed and operated, the user cannot request an operation other than requesting mode switching for the user terminal 130 in the locked mode.
  • the screen In the activation mode, the screen is turned on and input by touching the screen is possible. If necessary, during the process of entering the lock mode from the lock mode, a so-called 'lock screen' is displayed to indicate that the lock mode is in progress, and the user may be required to authenticate (password input, touch input of a preset pattern, etc.) for mode switching. .
  • the user authentication request may naturally proceed in a manner in which the user controls the access authentication unit 213 of the user terminal 130 in the activation mode state.
  • a method requires the user terminal 130 to be in the activation mode, and thus, in the locked mode, it is troublesome to perform various operations (switch request, input of a password, input and the like, etc.) to switch to the activation mode. Therefore, the present invention allows the user to request the 'user authentication process' or 'start of the authentication process' described below to the user terminal 130 in the lock mode.
  • the user terminal 130 will be described with reference to an example of being connected to the access manager 110 and the Bluetooth interface while being a smart phone. However, descriptions will be made mainly on the configuration essential for the description of the present invention, and descriptions unnecessary for the description of the present invention will be omitted unless otherwise indicated in the drawings. Accordingly, the user terminal 130 will not be described about the basic phone functions, various sensors, GPS sensor functions, etc. of the smart phone.
  • the user terminal 130 includes a network interface unit 201, a Bluetooth interface unit 203, a plurality of external buttons 205, a touch panel unit 207, and a controller 210.
  • the network interface unit 201 is a means for connecting to an IP network, and may correspond to not only a wireless LAN, but also a mobile telephone means according to a standard such as 3G, 4G, or LTE.
  • the Bluetooth interface unit 203 is connected to a Bluetooth interface (not shown) of the access manager 110 via Bluetooth.
  • the Bluetooth connection between the user terminal 130 and the access manager 110 may use various methods.
  • the access manager 110 periodically broadcasts pairing information for connection with the user terminal 130.
  • the pairing information includes a uniquely unique identifier (UUID), a MAC address, a name, and the like.
  • UUID uniquely unique identifier
  • the user terminal 130 provides a connection request message including the identification number of the user terminal to the access manager 110 to proceed with pairing. do.
  • the plurality of external buttons 205 are buttons installed on the outer surface of the user terminal 130, and the touch panel unit 207 is a display means for visually displaying information provided to the user by the user terminal 130. To the user. In addition, the touch panel unit 207 receives a user's control command (click, pointing, sclawing, etc.).
  • the control unit 210 controls the overall operation of the user terminal 130 of the present invention, and includes a master control unit 211 and an access authentication unit 213 to perform the characteristic user authentication method of the present invention.
  • control unit 210 may be interpreted as a configuration that is specially installed in the user terminal 130 for the present invention, in general to perform the main or basic functions (eg, telephone, communication, etc.) of the user terminal 130 It may be an installed configuration.
  • the controller 210 when the controller 210 is configured to perform the basic functions of the user terminal 130, the controller 210 may include a processor chip, which is hardware that the user terminal 130 basically holds, and the chip. It may be a functional indication of the configuration implemented by an operating system program (OS) operating based on.
  • OS operating system program
  • the conventional terminal to which the present invention is not applied may also include a controller 210.
  • the master controller 211 may also be one of applications that are software operating on an operating system program, and may be pre-installed in an existing terminal for controlling the Bluetooth interface unit 203.
  • the access authentication unit 213 is an application that operates on the operating system program, but may be installed separately in the existing terminal for the implementation of the present invention. In other words, when the access authentication unit 213 of the present invention is additionally installed in the existing terminal, the user terminal 130 of the present invention becomes.
  • the application for the access authentication unit 213 may be a program recorded in the computer-readable storage medium 31 provided in the application distribution server 30, the user terminal 130 distributes the application over the Internet The application may be downloaded and installed by accessing the server 30. In this case, the access authentication unit 213 may always operate in the user terminal 130, but may be called through another program or a user's click operation to start the operation.
  • the master controller 211 may transmit a connection request message to the access manager 110 or send a connection interruption message while operating as a master for the Bluetooth interface (not shown) of the access manager 110.
  • the master controller 211 provides the access management unit 110 with the information requested by the access authentication unit 213 to be transmitted through the Bluetooth interface unit 203, and provides the information provided by the access manager 110 to the Bluetooth interface unit. Provided through 203 is provided to the access authentication unit (213).
  • the access authentication unit 213 stores and manages a registered mobile key provided and provided by the mobile server 170, and according to an embodiment, one of the plurality of external buttons 205 may be set as a wake up button. have.
  • the access authentication unit 213 requests user authentication from the access manager 110 under the control of the user. Detailed operations of the access authentication unit 213 will be described in detail below.
  • the user terminal 130 of the present invention may be connected to the access manager 110 via Bluetooth to request user authentication for opening the door.
  • the method of the present invention is characterized in that it can proceed even when the user terminal 130 is in the lock mode.
  • the access authentication unit 213 is not already installed in the user terminal 130 in the manufacturing process, the user has a process of downloading and installing an application for the access authentication unit 213 from the application distribution server 30.
  • the access authentication unit 213 receives a mobile key by performing a user registration process. Since the user terminal 130 is a device dedicated to an individual user rather than a device for a plurality of users, the user registration 130 may use the access manager 110 information or additional information about the user. In addition, the user registration may be performed through the access manager 110 or through the mobile server 170 or other server as shown in the example of FIG.
  • the access authentication unit 213 receives information necessary for user registration from the user (or from the user terminal itself) and provides the mobile server 170 with the information. It requests the mobile server to register the user, and stores and manages the registered mobile key issued by the mobile server.
  • the user terminal 130 of the present invention can proceed with the user authentication process in the lock mode.
  • a means for receiving a user control command from the user for requesting the initiation of the user authentication ie, the door open.
  • the present invention can initiate user authentication even if any of the plurality of external buttons 205 is operated using the plurality of external buttons 205 of the user terminal 130 as its means.
  • one of the plurality of external buttons 205 may be limited to a wakeup button.
  • the button herein is not necessarily limited to a button that can be distinguished in hardware, the touch panel unit 207 or a part thereof that can be operated in the lock mode may also be a wake-up button. In the example of FIGS. 2 and 3, it is assumed that the first button 205-1 is registered as a wakeup button.
  • the user terminal 130 proceeds to the lock mode under the control of the user in the activation mode. Accordingly, the screen of the user terminal 130 is turned off and no operation other than the operation of the plurality of external buttons 205 including the wake-up button 205-1 is input (S301).
  • the access authentication unit 213 operates in the background mode.
  • the background mode does not receive user control commands or process external signals, but performs essential services.
  • the service is to check whether the wake-up button 205-1 has been operated (S303).
  • the access manager 110 broadcasts pairing information including its identification number (UUID), MAC address, name, and the like periodically for the Bluetooth connection with the user terminal 130. If the user terminal 130 is within a certain distance from the access manager 110, the access manager 110 may receive a signal broadcast. However, even if the Bluetooth interface unit 203 receives the signal broadcasted by the access manager 110, the access authentication unit 213 operating in the background does not process the information broadcasted by the access manager 110.
  • the access authentication unit 213 in the background operation determines whether there is an operation of the wake-up button 205-1 (S305). If the wake-up button 205-1 is operated, the user terminal 130 is still in the lock mode, but the access authentication unit 213 is switched to the activated state (S307).
  • the operation of the wakeup button 205-1 is as if the user attempts to authenticate the user for opening the door or the like in front of the access manager 110.
  • the access authentication unit 213 When the user terminal 130 is still in the locked mode and the access authentication unit 213 is switched to the active state receives a signal that the access manager 110 broadcasts (S309), and confirms that the pairing information is already registered. At the same time, it is determined whether a received signal strength indication (RSSI) of the corresponding signal is equal to or greater than a predetermined value (S311).
  • RSSI received signal strength indication
  • determining whether the strength of the received signal is greater than or equal to a predetermined value it is possible to determine whether the user terminal 130, that is, the user is close enough to the access manager 110, and the operation of the wake-up button 205-1 opens the door. It may be determined whether or not for user authentication.
  • the access authentication unit 213 performs a Bluetooth connection process to the access manager 110 through the Bluetooth interface unit 203 to establish a Bluetooth. Complete the connection (S313, S315, S317).
  • the step of measuring the strength of the received signal of S311 may be performed after the Bluetooth connection is completed.
  • the access authentication unit 213 When Bluetooth is connected, the access authentication unit 213 requests the user authentication by providing the mobile key possessed by the access manager 110. At this time, the mobile key provided to the access manager 110 may be encrypted (S319).
  • the user authentication unit 111 of the access manager 110 decrypts the encrypted mobile key and then performs user authentication by checking whether there is the same or matching one of the registered mobile keys owned by the user (S321).
  • the user authentication unit 111 provides a user authentication result to the user terminal 130. In addition, if user authentication succeeds, a predetermined operation is performed. For example, the door lock 10 may be controlled to open the door or to release various locks. If the user authentication fails, the user authentication unit 111 may not perform any operation other than providing the result to the user terminal 130 (S323).
  • the access manager 110 When the access authentication unit 213 receives the user authentication result from the access manager 110, the access manager 110 requests the Bluetooth connection disconnect (Disconnect) (S325), accordingly, the user terminal 130 and the access manager ( The Bluetooth connection between 110 is terminated (S327).
  • the user authentication method of the user terminal 130 of the present invention is performed.
  • the user may complete user authentication for the access manager 110 by simply operating the wake-up button 205-1 in front of the access manager 110.
  • the door can be opened.
  • the smartphone app electronic authentication unit
  • the access manager 110 performs a door open and the authentication result is stored in the management server 150 through a wired LAN.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Theoretical Computer Science (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Telephonic Communication Services (AREA)
  • Lock And Its Accessories (AREA)

Abstract

L'invention concerne un procédé d'authentification d'un utilisateur d'un terminal d'utilisateur accédant à un dispositif de contrôle d'accès, un programme pour le procédé, et un serveur de distribution de programme dans lequel le programme est stocké. Selon la présente invention, un processus d'authentification d'utilisateur pour le dispositif de contrôle d'accès peut être effectué en actionnant uniquement un bouton d'entrée externe (bouton de réveil) même si un terminal d'utilisateur tel qu'un smartphone est dans un état verrouillé. Donc, par exemple, lorsque le dispositif de contrôle d'accès commande une ouverture de porte, l'utilisateur peut effectuer rapidement une opération d'ouverture de porte grâce à une opération simple et minimale.
PCT/KR2016/015359 2016-03-24 2016-12-28 Procédé d'authentification d'utilisateur de terminal d'utilisateur accédant à un dispositif de contrôle d'accès, application pour le procédé, et serveur de distribution d'application dans lequel l'application est stockée WO2017164494A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
KR10-2016-0035299 2016-03-24
KR1020160035299A KR101763140B1 (ko) 2016-03-24 2016-03-24 출입관리기에 접속한 사용자 단말기의 사용자 인증방법, 그 방법을 위한 어플리케이션 및 그 어플리케이션이 저장된 어플리케이션 분배 서버

Publications (1)

Publication Number Publication Date
WO2017164494A1 true WO2017164494A1 (fr) 2017-09-28

Family

ID=59419077

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/KR2016/015359 WO2017164494A1 (fr) 2016-03-24 2016-12-28 Procédé d'authentification d'utilisateur de terminal d'utilisateur accédant à un dispositif de contrôle d'accès, application pour le procédé, et serveur de distribution d'application dans lequel l'application est stockée

Country Status (2)

Country Link
KR (1) KR101763140B1 (fr)
WO (1) WO2017164494A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109598823A (zh) * 2017-09-30 2019-04-09 宁波方太厨具有限公司 基于多传感器的身份识别装置及身份识别方法
WO2019128255A1 (fr) * 2017-12-27 2019-07-04 杭州海康威视数字技术股份有限公司 Procédé et appareil de commande de porte de canal piéton et porte de canal piéton

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR102488565B1 (ko) * 2020-09-28 2023-01-13 주식회사 유니온커뮤니티 사용자 단말기를 이용한 출입자 전자명부 생성방법, 그 방법을 위한 어플리케이션 및 그 어플리케이션이 저장된 어플리케이션 분배 서버
KR102526847B1 (ko) * 2021-05-24 2023-04-28 주식회사 아이시냅스 비가청 음파 신호 기반의 출입 인식 시스템, 방법 및 이를 위한 장치

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101296863B1 (ko) * 2013-06-04 2013-08-14 주식회사 아이콘트롤스 Ｎｆｃ 도어락을 이용한 출입인증 시스템
KR20140135901A (ko) * 2013-05-16 2014-11-27 주식회사 유니온커뮤니티 출입통제 단말기의 제어방법 및 이를 위한 관리자 단말기
KR20150114618A (ko) * 2014-04-01 2015-10-13 정재호 이동통신망의 m2m기반에서 nfc기능이 있는 스마트폰에 의한 현관카메라 및 도어락 제어 방법과 이를 위한 장치
KR20150129553A (ko) * 2014-05-12 2015-11-20 삼성에스디에스 주식회사 출입 관리 시스템 및 방법
KR20150134806A (ko) * 2014-05-23 2015-12-02 양찬웅 출입 관리 시스템 및 그 방법

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20140135901A (ko) * 2013-05-16 2014-11-27 주식회사 유니온커뮤니티 출입통제 단말기의 제어방법 및 이를 위한 관리자 단말기
KR101296863B1 (ko) * 2013-06-04 2013-08-14 주식회사 아이콘트롤스 Ｎｆｃ 도어락을 이용한 출입인증 시스템
KR20150114618A (ko) * 2014-04-01 2015-10-13 정재호 이동통신망의 m2m기반에서 nfc기능이 있는 스마트폰에 의한 현관카메라 및 도어락 제어 방법과 이를 위한 장치
KR20150129553A (ko) * 2014-05-12 2015-11-20 삼성에스디에스 주식회사 출입 관리 시스템 및 방법
KR20150134806A (ko) * 2014-05-23 2015-12-02 양찬웅 출입 관리 시스템 및 그 방법

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109598823A (zh) * 2017-09-30 2019-04-09 宁波方太厨具有限公司 基于多传感器的身份识别装置及身份识别方法
WO2019128255A1 (fr) * 2017-12-27 2019-07-04 杭州海康威视数字技术股份有限公司 Procédé et appareil de commande de porte de canal piéton et porte de canal piéton

Also Published As

Publication number Publication date
KR101763140B1 (ko) 2017-07-31

Similar Documents

Publication Publication Date Title
WO2017164494A1 (fr) Procédé d'authentification d'utilisateur de terminal d'utilisateur accédant à un dispositif de contrôle d'accès, application pour le procédé, et serveur de distribution d'application dans lequel l'application est stockée
WO2015119417A1 (fr) Dispositif de clé électronique pouvant commander sans fil un système de verrouillage et transmettre une authentification de commande du système de verrouillage, système et procédé associés
WO2020218627A1 (fr) Procédé et système de service de partage de clé numérique destiné à un véhicule
WO2019203306A1 (fr) Système de partage
CN105427413A (zh) 智能开锁方法和智能锁具
WO2017161832A1 (fr) Procédé de commande d'ascenseur, dispositif de commande d'ascenseur, et terminal
KR20190036068A (ko) 해시 체인을 이용한 단말 간 인증 절차를 거치는 단말 간 통신 방법
WO2019039746A1 (fr) Procédé et système de commande de verrouillage de porte de portail et dispositif de verrouillage de porte associé
KR101550206B1 (ko) 이중보안기능이 구비된 지정맥인식시스템 및 그 제어방법
WO2018169150A1 (fr) Système et procédé d'authentification d'utilisateur à base d'écran verrouillé
KR101623432B1 (ko) 블루투스 연결에 의한 실내에서의 출입인증을 차단할 수 있는 블루투스 출입인증장치 및 그 방법
CN111989723B (zh) 共享系统
WO2018155828A1 (fr) Système d'authentification d'utilisateur pour chaque zone
KR20140135901A (ko) 출입통제 단말기의 제어방법 및 이를 위한 관리자 단말기
KR102211272B1 (ko) 출입 관리 시스템 및 이를 이용한 출입 관리 방법
CN110264602B (zh) 一种开锁系统、方法、终端设备及门锁服务器
WO2021132914A2 (fr) Système d'authentification de l'utilisateur d'une installation et procédé de commande associé
KR102345472B1 (ko) 사용자 무태깅 잠금 해제 시스템
WO2022145966A1 (fr) Système de contrôle d'accès utilisant une infrastructure à clé publique
WO2022050726A1 (fr) Appareil et système de commande d'ouverture et de fermeture de porte
WO2021086161A1 (fr) Système et serveur de gestion de clé de électronique
CN114258023A (zh) Mesh组网方法、装置、设备及可读存储介质
JP2002300637A (ja) ロック制御システム
KR20170065709A (ko) 출입통제 관리기와 연결되는 휴대 단말기의 출입 인증방법 및 그 방법을 구현한 소프트웨어를 분배하는 소프트웨어 분배 서버
WO2014010875A1 (fr) Procédé pour exécuter une application en liaison avec un dispositif apparié et effectuer un paiement, et système numérique associé

Legal Events

Date Code Title Description
NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16895620

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 16895620

Country of ref document: EP

Kind code of ref document: A1