WO2018016678A1

WO2018016678A1 - System and method for managing user information acquired on basis of iot in cloud environment

Info

Publication number: WO2018016678A1
Application number: PCT/KR2016/011515
Authority: WO
Inventors: 한승현
Original assignee: 한승현
Priority date: 2016-07-20
Filing date: 2016-10-14
Publication date: 2018-01-25
Also published as: KR101922908B1; KR20180010006A

Abstract

The present technology provides a system and method for managing user information acquired on the basis of IOT, in a cloud storage. According to a specific example of the present invention, an authentication procedure can be performed for personal data including employee diligence and indolence information collected from various external devices, by using a predetermined authentication protocol, and then the authenticated personal data can be stored and managed in association with a cloud storage, so that a resource in the cloud storage can be stably provided to an authenticated employer and security of the personal data can be fundamentally improved.

Description

System and method for managing user information acquired based on IOT in cloud environment

The present invention relates to a system and method for managing user information acquired on the basis of IOT in a cloud environment, and more particularly, a user including employee time and attendance information obtained on the basis of Internet of Things (IOT) from a plurality of external devices. It's about a technology that allows data to be stored and managed in private storage in a cloud environment.

In general, an ordering system mainly used in a general restaurant such as a restaurant or a restaurant may include an ordering system using a call bell or a food ordering device using an ordering terminal.

The ordering system using a call bell is configured to provide a request service after a clerk presses the call bell and the clerk approaches the customer and checks a specific order menu and various additional service requests.

In this process, due to the staff's irresponsibility to the call of the customer, the provision of the guest's request service may be delayed slightly. In addition, there is a disadvantage that the guest cannot know the state of his request service.

On the other hand, visible light wireless communication (VLC) corresponding to the IEEE 802.15.7 standard communicates using visible light visible to the human eye. Accordingly, the visible light wireless communication has an advantage that the illumination range can be visually confirmed as the communication range. In addition, unlike other wireless communication, visible light wireless communication does not require a separate infrastructure network, so it is suitable for transmitting and receiving simple information such as an employee ID in a small area such as a restaurant.

By using the visible light wireless network, in response to the employee ID information from the employee ID sender and the information on the requested service, the user can obtain the service response time requested by the guest and user attendance information on the number of service provisions of the employee. The service quality can be improved. The user's time and attendance information can be used as objective evidence when providing incentives according to the employee's time and attendance, which can inspire the service spirit of the employee.

However, the employer can track the service status of each employee by accumulating and recording such user time and attendance information, and for this purpose, the employee should receive the time and attendance information from various devices and store it in one storage.

Employee time and attendance information is stored in a database on the server owned by the employer and cannot be linked to the services of web-based storage. In other words, there was a possibility of employer's subjective judgment on employee personnel evaluation based on employee attendance information.

In addition, since the data format and size of employee attendance information obtained from external devices such as various wearable devices or IoT-based devices are different, there is a limitation that employee attendance information supplied from an external device cannot be associated with standard data. have.

Therefore, the service that stores and manages the employee attendance information by the employer individual is collected from a variety of external devices, it is preferable to process the processing and storage of the employee attendance information collected from various external devices in a standardized data format Do. In addition, there was a limitation in receiving employee attendance information from various external devices and stably storing the received employee attendance information in the storage owned by the employer.

In order to overcome this limitation, the present invention has been devised using a cloud-based storage service capable of stably storing employee time and attendance information provided from various external devices. To this end, the employee attendance information obtained from various external devices can be collected and the collected user information can be relayed and stored to a cloud storage service operated by an individual, and the employee attendance information recorded in the cloud storage can be accessed and stored in the resources of the cloud storage. You must be authenticated and authorized for the web service client to use.

Accordingly, the present invention proposes a method for efficiently and reliably storing and managing cloud storage resources operated by individual web service clients using authentication and authorization procedures.

The present invention has been made to solve the problems of the prior art, it is possible to perform the authentication procedure for the web service client that provides the user information received from various external devices and to store the user data in the cloud storage upon successful authentication, IOT can install and execute user data recorded in cloud storage according to a predetermined framework, and can efficiently provide resources stored in cloud storage to multiple authenticated web service clients without a service interruption using asynchronous communication. An object of the present invention is to provide a system and method for managing user information obtained on the basis of a cloud environment.

Technical problem of the present invention for achieving the above object,

A management server for managing employee time and attendance information collected from various external devices in connection with cloud storage, the management server comprising: a receiving module for outputting user data including collected employee time and attendance information; A conversion module for generating a log document from the user data according to a predetermined rule; And a relay module for performing user authentication in connection with the cloud storage and transmitting the user data to the cloud storage upon successful authentication.

Preferably, the employee time and attendance information may include at least one of employee ID information, a service response time requested by a guest in response to information on a requested service, the number of service provided by an employee, a working time, and calorie consumption within a working time. have.

Preferably, the receiving module may receive, as log data, user attendance information generated through various sensing devices of various external devices, and list at least one of user data size, data specific period, and number of text characters. Validate user data for.

Preferably, the conversion module may be provided to document the received user data in the form of a log document in the form of Json and then assign a manifest according to a predefined rule.

Preferably, the relay module may be provided to be connected through a wireless communication network with the cloud storage, to perform an authentication procedure for user data, and to transmit and store user data granted with a manifest to the cloud storage upon successful authentication. When a request for authentication is received from a web service client to obtain access to a cloud storage resource using an existing authentication protocol, the resource is accessed to the web service client based on the information on the web service client and the redirection of the URL. It can issue an access token that can be used and authenticate the web service client using the issued access token.

Preferably, the management server may be provided to execute, based on a predetermined framework to install, run, update and remove a service that provides the resources of the cloud storage, the receiving module, the conversion module, and the relay The module may further include an embedded module for continuously communicating a large amount of user data between modules, and may be provided to interwork with the embedded module using a data grid.

In addition, it is preferable that the management server further includes a security module for executing a security policy of the cloud storage predetermined based on AOP (Aspect Oriented Programming).

Preferably, the relay module connects between the web service client and the cloud storage and transmits the resources to the plurality of web service clients that have requested the service of the cloud storage and executes the authentication on the web service client. The query string of the web service client may be generated and assembled in the form of a search query, and the user document recorded in the cloud storage may be read, processed and transmitted to the web service client based on the search query.

Another aspect of the present invention, the receiving module provided in the management server receives the user information generated from the various transmitters; A conversion step of generating a log document of the user data received by the conversion module included in the management server and converting a format of the user data by applying a predetermined manifest based on the generated log document; And a service providing step of connecting to the cloud storage in the relay module secured by the management server and transmitting user data to the cloud storage when authentication is successful after the authentication for the web service client is executed.

Preferably, the service providing step includes: connecting between the web service client and the cloud storage to transmit the user resource of the cloud storage to the plurality of web service clients requesting the service in the relay module of the management server; Authenticating the web service client by generating and transmitting an access token according to the authentication request of the web service client in the relay module; And delivering the user resource to the web service client upon successful authentication of the web service client, and between the web service client and the cloud storage to transfer the resource to a plurality of web service clients that have requested a service for the resource in the cloud storage. Connect and execute authentication for the web service client, and upon successful authentication, create and assemble a query string of the web service client in the form of a search query, read the user document recorded in the cloud storage based on the search query. It may be provided to process and transmit to the web service client.

According to the present invention, the personal data including employee attendance information collected from various external devices is stored and managed in association with cloud storage after performing an authentication procedure using a predetermined authentication protocol, thereby stably storing resources of cloud storage to an authorized employer. Can be provided, and the effect of fundamentally improving the security of personal data can be obtained.

As a result, employers can receive various services based on the resources of cloud storage based on web storage, and can track cloud storage resources in real time in the case of an internet-connected environment. There is an advantage in that it is possible to manage and reduce the administrative costs of personal storage using personnel management.

The following drawings attached in this specification are illustrative of the preferred embodiments of the present invention, and together with the detailed description of the invention to serve to further understand the technical spirit of the present invention, the present invention is a matter described in such drawings It should not be construed as limited to.

1 is a diagram illustrating a configuration of a system for managing user information acquired on an IOT basis in a cloud environment according to an exemplary embodiment of the present invention.

2 is a diagram illustrating a detailed configuration of a management server of a system that manages user information acquired based on an IOT in a cloud environment according to an exemplary embodiment of the present invention.

3 is a flowchart illustrating a process of managing user information acquired based on an IOT in a cloud environment according to another exemplary embodiment of the present invention.

Hereinafter, with reference to the accompanying drawings will be described in detail with respect to the system and method for managing user information obtained on the basis of IOT in a cloud environment according to an embodiment of the present invention.

As the inventive concept allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the text. However, this is not intended to limit the present invention to the specific disclosed form, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

In describing the drawings, similar reference numerals are used for similar elements. In the accompanying drawings, the dimensions of the structures are shown in an enlarged scale than actual for clarity of the invention.

Terms such as first and second may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, action, component, part, or combination thereof described on the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, parts, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter will be described in detail with reference to the accompanying drawings for the tsunami arrival time analysis method according to an embodiment of the present invention.

FIG. 1 is a diagram illustrating a configuration of an apparatus for managing information acquired based on an IOT based on a personal storage in a cloud environment, and FIG. 2 is a diagram illustrating a detailed configuration of a management server illustrated in FIG. 1.

Hereinafter, in the present specification, "employee" means all employees engaged in tertiary industries, such as hospitals, hotels, and hypermarkets, and "web services client" refers to a person or institution that manages and supervises such employees.

In addition, the “T & A Time Attendance Information” provides various service related information such as the service response time requested by the customer and the number of service provided by the employee, working hours, calories burned within working hours, and the like in response to the employee ID information and the requested service information. It may include. In this embodiment, the employee related information may be stored in the form of an electronic document.

Here, "external equipment" refers to a device that collects and transmits employee attendance information based on IoT as a wearable device possessed by an employee, and wherein the communication network is Bluetooth, ZigBee, WLAN, NetSpot, etc. It is provided with one of the AD-HOC, the WiBRO, and the INTERNET communication network.

The communication network, software, and data described above are merely examples, and various modifications may be made without departing from the spirit of the present invention.

1 and 2, a system for managing user information obtained based on an IOT in a cloud environment according to an exemplary embodiment of the present invention may include a cloud storage 50 processing user information provided from a plurality of transmitters 10. Can be provided, such a system can include a plurality of transmitters 10, a management server 30, and cloud storage 50.

The plurality of transmitters 10 are various external devices. The transmitter 10 is a variety of external devices, such as employee ID information and requested service information. Employee time and attendance information including service-related information may be generated and transmitted to the receiving module 30 through a communication network. Here, the various external transmitters 10 may refer to various sensing devices such as an employee management database, a wearable device, an in-body measuring device provided in each working place.

In this case, the transmitter 10 may install an app for retrieving employee attendance information collected through the established wireless network and establish a wireless communication network, and collect employee attendance information through the wireless network established according to the execution of the installed app. have.

For example, when receiving user data using low-power Bluetooth (BLE), low-power Bluetooth (BLE) is an ultra-low-power short-range wireless personal communication network technology, which has an application range of 50m or less and can provide employee management services based on location with low power. . Here, the transmission module 10 of the low-power Bluetooth beacon may monitor the time and attendance information of the transmission module 10 through the established wireless network after performing an adverting function of carrying small data of 31 bytes. have.

Meanwhile, as illustrated in FIG. 2, the management server 30 may include a receiving module 31, a conversion module 32, and a relay module 33.

The receiving module 31 may receive user data containing employee time and attendance information from the external transmitting module 10 through a wireless communication network.

That is, the reception module 31 may receive the user's attendance information of the transmitter 10 generated through various sensing devices of the transmission module 10 through the wireless communication network in log form.

In addition, the receiving module 31 may check the validity of the received user data. Validation of data plays a particularly important role when trying to maintain the accuracy and consistency of the user data entered.

The receiving module 10 may check the validity of user data input from various external transmitters 10 by a user-defined list such as a data size, a specific period of time, a number of text characters, etc., outside the designated range. Therefore, the input of user data can be limited to an integer, a number of characters, a size, a duration, or the like within a predetermined range. In addition, user data formats provided from various external transmitters 10 can maintain consistency of data that is not unified.

Meanwhile, the receiving module 31 may determine whether to convert the format of the user data that has been validated. The format of the data refers to parameters such as integer, decimal, text, date, and time.

That is, in the present invention, in order to store user data of the transmitter 10 input through various sensing devices in cloud storage, a format check and conversion of user data whose format is not uniform are required.

Accordingly, the conversion module 32 may generate a log document of the user data received by the reception module 31 and convert the format of the received user data based on the generated log document. In other words, the user data is documented in the log document format of the Json type, and the manifest data according to the predefined rule is transferred to the relay module 33.

In addition, the relay module 33 may be connected to the cloud storage 50 to authenticate the web service client (employer) and then transmit user data to the cloud storage 50.

That is, the relay module 33 may be connected through a wireless communication network with the cloud storage 50, perform an authentication procedure, and transmit the user data given a manifest to the cloud storage 50 upon successful authentication.

The authentication process may be performed by requesting an access token from a web service client and issuing the requested access token, and may be understood as an authentication process for storing user data using an API provided by cloud storage.

For example, in order to provide web services clients with various services using cloud storage resources by using web service clients' linkage with other web service resources such as SNS, A series of steps are required to authorize the service client.

In general, the authorization authorization process for user resource access authority may be performed based on an authentication protocol for granting authority to access and use user resources between a web service client and a web service resource using a standard authentication method developed by an open API.

When an authentication request from a web service client is passed to the web service resource to obtain a permission to access the resource using the authentication protocol, the web service resource is based on a redirect of information or URL for the web service client. Issue an access token to the web service client to access and use the resource. Using this access token, it is possible to provide various services by accessing the user's resources to the web service client (employer).

The management server 30 is a series of the above-described process is performed based on a predetermined framework, it is possible to perform the installation, execution, update and removal, etc. without interrupting the service to the various components of the bundle.

On the other hand, the management server 30 may use an asynchronous communication network to communicate the user data provided from the cloud storage 50 to a high speed multiple web service clients, the user data according to the internal DAO transaction and deployment schedule of this asynchronous communication network It can be processed, and can be processed before and after based on the open API and batch schedule.

In addition, the management server 30 may further implement the embedded module 34 for continuous mass communication of user data between modules, and may be interworked between the embedded modules 34 using a data grid.

Meanwhile, the management server 30 may further include a security module 35 for executing a security policy of cloud storage based on AOP (Aspect Oriented Programming). Here, the security module 35 may perform security according to a predetermined security policy by performing predetermined AOP (Aspect Oriented Programming). The security module 35 extracts a security policy of a resource of cloud storage as a single function, thereby reducing code duplication and increasing security efficiency.

Subsequently, the relay module 33 executes authentication of the web service client when a service search request for a resource of the cloud storage 50 is requested from the web service client, and generates a query string of the web service client in the form of a search query when the authentication is successful. And assembling, reading and processing the user document recorded in the cloud storage 50 based on the search query, and transmitting the processed document to the web service client.

In addition, the relay server 33 is implemented to dynamically define the message data processing as an optimized dynamic management relay model, and can be provided based on a core technology that can efficiently perform data processing and processor management.

Accordingly, user data may be stored in various cloud storages 50 through authentication procedures for various transmitters, and user data recorded in cloud storages 50 may be installed according to a predetermined Open Service Gateway Initiative (OSGi) framework. By using asynchronous communication, user data stored in the cloud storage 50 can be efficiently provided to a plurality of authorized web service clients without service interruption.

Hereinafter, a process of managing user information acquired on the basis of the IOT in the cloud storage using the system for managing the user information acquired on the basis of the above-described IOT in the cloud storage will be described with reference to FIG. 3.

FIG. 3 is a flowchart illustrating an operation process of a system for managing user information acquired on the basis of the IOT illustrated in FIG. 1 in a cloud storage. Referring to FIG. 3, FIG. 3 illustrates user information obtained on the basis of an IOT according to another embodiment of the present invention. How to manage the cloud storage.

First, the management server 30 receives user information generated from various transmitters, generates a log document of the received user data, and converts the format of the user data by assigning a predetermined manifest based on the generated log document (S11). , S13).

Subsequently, the management server 30 may connect to the cloud storage and transmit user data to the cloud storage when authentication is successful after the authentication for the web service client is executed.

That is, the management server 30 connects between the web service client and the cloud storage to transmit the user resource of the cloud storage to the plurality of web service clients who have requested a service, and then generates and transmits an access token according to the authentication request of the web service client. The access token transmitted may be used to authenticate the web service client (S15, S17, S19).

In addition, upon successful authentication of the web service client, the management server 30 may deliver a resource of the cloud storage 50 to the web service client (S21).

The process of delivering resources for cloud storage is as follows: That is, the management server 30 connects between the web service client and the cloud storage to transmit the resources to the plurality of web service clients that have requested the service of the cloud storage (S) and executes the authentication on the web service client. Upon success, the query string of the web service client may be generated and assembled into a search query, and the user document recorded in the cloud storage may be read and processed based on the search query, and then processed and transmitted to the web service client (S23, S25, S27, S31, S33).

The steps of the method or algorithm described in connection with the embodiments presented herein may be embodied in the form of program instructions that may be executed by various computer means and recorded on a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

The foregoing description of the present invention is intended for illustration, and it will be understood by those skilled in the art that the present invention may be easily modified in other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive. For example, each component described as a single type may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined form.

The scope of the present invention is shown by the following claims rather than the above description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

The authentication process for various transmitters allows user data to be stored in various cloud storages, user data recorded in cloud storage can be installed and executed according to a predetermined framework, and user data stored in cloud storage can be stored using asynchronous communication. In terms of the accuracy and reliability of operations, and furthermore, the performance efficiency of the systems and methods for managing user information obtained in IOT based on cloud storage that can be efficiently provided to a large number of authorized web service clients without interruption of service. It is an invention with industrial applicability because it is capable of bringing great progress and is not only sufficient for commercial or sales of cloud storage devices, but also practically and clearly.

[Description of the code]

10: transmitter

30: management server

31: receiving module

32: conversion module

33: relay module

34: embedded module

35: security module

50: cloud storage

Claims

It includes a management server that manages employee attendance information collected from various external devices in connection with cloud storage,

The management server,

A receiving module for outputting user data including collected employee time and attendance information;

A conversion module for generating a log document from the user data according to a predetermined rule; And

And a relay module configured to perform user authentication in connection with the cloud storage and then transmit the user data to the cloud storage upon successful authentication.
According to claim 1, The employee attendance information,

Obtained based on the IOT, characterized in that it comprises at least one of the service response time requested by the guest in response to the information on the requested service, the number of service provided by the employee, the working time, and the calorie consumption within the working time A system that manages user information in a cloud environment.
The method of claim 2, wherein the receiving module,

System for managing user information obtained on the basis of the IOT on the basis of the cloud characterized in that for receiving the employee attendance information generated by the various sensing devices of the various external devices in the form of log user data.
The method of claim 3, wherein the receiving module,

And validating user data on at least one of the user data size, a specific data period, and the number of text characters in the cloud environment.
The method of claim 4, wherein the conversion module,

And documenting the received user data in a log document format in the form of Json and assigning a manifest according to a pre-defined rule.
The method of claim 5, wherein the relay module,

Acquisition based on IOT, characterized in that the connection to the cloud storage via a wireless communication network, performs the authentication process for the user data, and if the authentication is successful, transmit the user data to the cloud storage to the storage is stored and stored A system that manages user information in a cloud environment.
The method of claim 1, wherein the relay module,

When an authentication request is received from a web service client to obtain access to a cloud storage resource using an existing authentication protocol, the resource is accessed and used by the web service client based on the information on the web service client and the redirection of the URL. Issue access tokens,

A system for managing user information obtained in a cloud environment based on an IOT, characterized in that it is provided to perform authentication for a web service client using an issued access token.
The method of claim 7, wherein the management server,

A system for managing user information obtained on an IOT basis in a cloud environment, wherein the user information obtained on an IOT basis is provided to install, execute, update, and remove a service that provides a resource of cloud storage based on a predetermined framework.
The method of claim 7, wherein the management server,

Further comprising an embedded module for continuous mass communication of user data between the receiving module, the conversion module, and the relay module,

A system for managing user information obtained on an IOT basis in a cloud environment, wherein the embedded information is provided to be interlocked using a data grid between the embedded modules.
The method of claim 7, wherein the management server,

The system for managing user information obtained on the basis of the IOT in the cloud environment, further comprising a security module for executing a security policy of the cloud storage predetermined based on AOP (Aspect Oriented Programming).
The method of claim 7, wherein the relay module,

Connect between the web service client and the cloud storage and perform authentication for the web service client to transmit resources to a plurality of web service clients that have requested a service on the resource of the cloud storage,

When the authentication is successful, the query string of the web service client is generated and assembled into the form of a search query,

A system for managing user information obtained on the basis of IOT in a cloud environment, characterized in that the user document recorded in the cloud storage based on the search curie is read, processed and transmitted to the web service client.
A receiving step of receiving, by a receiving module provided in the management server, user information generated from various transmitters;

A conversion step of generating a log document of the user data received by the conversion module included in the management server and converting a format of the user data by applying a predetermined manifest based on the generated log document; And

The user information obtained on the basis of the IOT, characterized in that it comprises a service providing step of connecting to the cloud storage in the relay module stored in the management server to perform authentication for the web service client and then transmit the user data to the cloud storage upon successful authentication. How to manage in a cloud environment.
The method of claim 12, wherein the service providing step,

Connecting between the web service client and the cloud storage to transmit the user resource of the cloud storage to the plurality of web service clients that requested the service in the relay module of the management server;

Authenticating by generating and transmitting an access token according to an authentication request of a web service client in a relay module; And

A method for managing user information obtained on an IOT basis in a cloud environment, comprising: delivering user resources to a web service client upon successful authentication of the web service client.
The method of claim 12, wherein the service providing step,

Connect between the web service client and the cloud storage and send authentication to the web service client to transfer the resource to the plurality of web service clients that requested the service on the cloud storage,

When authentication is successful, the query string of the web service client is created and assembled into the form of a search query.

And reading, processing, and transmitting the user document recorded in the cloud storage based on the search query, to the web service client, in the cloud environment.