WO2020230934A1

WO2020230934A1 - Totp-based carsharing vehicle control authentication method and system

Info

Publication number: WO2020230934A1
Application number: PCT/KR2019/005909
Authority: WO
Inventors: 정성일; 우혁준; 이상민
Original assignee: (주)디지파츠
Priority date: 2019-05-15
Filing date: 2019-05-17
Publication date: 2020-11-19

Abstract

A TOTP-based carsharing vehicle control authentication system according to the present invention can comprise: a user terminal comprising a communication unit for communicating with a carsharing service network server, an exclusive TOTP generation application for reserving a carsharing vehicle through the communication unit, combining a reservation number key value received from the network server and a time value corresponding to a received time point, and then hashing the combination result so as to generate a final TOTP value, a display unit for displaying the generated TOTP value, and a short-range communication unit for transmitting the generated TOTP value to an external device; and a vehicle control device comprising a keypad in which the TOTP value displayed on the display unit of the user terminal can be inputted, or a short-range communication unit capable of receiving the input of the TOTP value from the user terminal through short-range communication, a communication unit for communicating with the carsharing service network server to receive a carsharing reservation number key value of the user, an internal TOTP generation unit for combining the received reservation number key value and a time value corresponding to a time point at which the key value was received, and then hashing the combination result so as to generate a TOTP value, a comparison unit for comparing the TOTP value inputted through the keypad or the short-range communication unit with the value generated by the internal TOTP generation unit, and a control unit for controlling a vehicle by authenticating the user of the user terminal as an available carsharing service user when the comparison result value in the comparison unit is within a valid range.

Description

TOTP-based car sharing vehicle control authentication method and system

The present invention relates to a car-sharing vehicle control authentication method and system for authenticating a car-sharing user, and in detail, a time-based one-time password generation algorithm (TOTP: Time-Based One-) for authentication of a car-sharing user. Time Password Algorithm) authentication method and system for car sharing vehicle control.

Recently, a car sharing service in which a number of unspecified vehicles are shared is rapidly spreading, and car sharing users and target vehicles are also rapidly increasing.

Car-sharing is a kind of rental car service in which a fixed number of cars are rented for as long as necessary for an unspecified number of cars. The biggest difference from a general rental car from the perspective of users is that they do not face the vehicle owner or car sharing service provider, but use a smartphone app. This means that you can reserve a vehicle to use and use the vehicle by opening the vehicle door with a smartphone and starting the vehicle without a key.

Due to the characteristics of car sharing as described above, it is impossible to exchange smart keys because a large number of unspecified users use the vehicle without confronting the service provider.In addition, in order to control the vehicle door with a smartphone, door locks, horns, lights, etc. A vehicle control device for remotely controlling the device is mounted, and a smart key for a vehicle is usually built into the vehicle control device.

Here, the vehicle control device can receive a control message through remote SMS or through a connected Transmission Control Protocol/Internet Protocol (TCP/IP) Channel.

Control through the vehicle control device is performed through communication with a designated remote server, which means that it must always be in an area where wireless communication is possible, and there is a problem that control is not normally performed in an area where wireless signals are weak.

As a method to overcome this shortcoming, a radio frequency identification (RFID) card can be issued and used for offline authentication.

However, the existing Connected-oriented or SMS (Short message service) control, RFID method may have the following problems.

1. As the wireless communication connection must always be maintained, power consumption increases.

2. Service maintenance costs increase due to the use of SMS.

3. Due to the impractical nature of SMS, if the response to vehicle control is not performed within a few seconds, it may be recognized as a malfunction, and unintended control may be performed due to delayed SMS messages.

4. In areas with weak radio signals (shaded areas), service may become unavailable.

5. When using an RFID card, there is a problem of issuing a card and the inconvenience of having a card when using the service.

Accordingly, there is a need for a method and system capable of solving all these problems and inconveniences.

Accordingly, the present invention has been conceived to solve the above problems, and the technical problem to be solved by the present invention is that the user terminal and the vehicle control device use the same key value to generate TOTP (Time-based One We intend to provide a TOTP-based car sharing vehicle control authentication method that mutually authenticates the value of -time Password).

In addition, it is intended to provide a TOTP-based car sharing vehicle control authentication system comprising a user terminal that generates TOTP and displays it to the user, and a vehicle control device that decodes, compares and authenticates the generated TOTP value, and controls the vehicle.

A car sharing vehicle control authentication system based on a Time-based One-time Password (TOTP) according to an embodiment for realizing the object of the present invention includes: a communication unit for communicating with a car sharing service network server; A TOTP generation-only app that reserves a car-sharing vehicle through the communication unit, combines the reservation number Key value received from the network server and a time value corresponding to the time point received, and then hashes to generate a TOTP value; A display unit for displaying the generated TOTP value; And a user terminal configured with a short-range communication unit for transmitting the generated TOTP value to an external device. And a keypad for inputting a TOTP value displayed on the display unit of the user terminal or a short-range communication unit for receiving a TOTP value from the user terminal through short-range communication. A communication unit for receiving a key value of a user's car sharing reservation number by communicating with the car sharing service network server; An internal TOTP generator for generating a TOTP value by combining the received reservation number Key value and a time value corresponding to a time point at which the key value is received, and hashing; A comparison unit comparing a TOTP value input through the keypad or a short-range communication unit with a value generated by the internal TOTP generation unit; And a vehicle control device including a controller configured to control the vehicle by authenticating a user of the user terminal as a useful car sharing service user if the comparison result value is within a valid range in the comparison unit.

In one embodiment, a SHA-1 (Secure Hash Algorithm-1) cryptographic hash function algorithm may be used for hashing in the TOTP generation exclusive app of the user terminal and the internal TOTP generation unit of the vehicle control device.

In one embodiment, the use of a keypad for inputting the TOTP value or a short-range communication unit for receiving a TOTP value from the user terminal may be selected by the user.

In one embodiment, the user terminal and the vehicle control device do not separately receive a reservation number key value from a network server, and a unique number assigned to a vehicle such as VID (Vehicle ID) or MDN (Mobile Directory Number) of the reserved vehicle Can be used as a value to generate the TOTP value.

In an embodiment, in order to prevent authentication failure due to different time values used by the user terminal and the vehicle control device, a time window size for the time value is set in the comparison unit of the vehicle control device. The effective range of the TOTP value can be adjusted.

In one embodiment, the communication unit provides a data movement path between a user terminal, a car sharing network server, and a vehicle control device, and through a wired/wireless network such as a wide area network (WAN), a mobile communication network, an LTE network, etc. Can communicate.

In one embodiment, the short-range communication unit may communicate through a communication network such as Wi-Fi, Bluetooth, Zig-bee, and wired cable.

A TOTP-based car sharing vehicle control authentication method according to an embodiment for realizing the object of the present invention includes: performing a reservation of a car sharing vehicle through a car sharing service network server in a user terminal; Receiving a reservation number key value from a car sharing service network server as a result of performing the reservation; Transmitting, by the car sharing service network server, the reservation number key value to a vehicle control device at the same time; Generating a TOTP value by hashing a value obtained by combining the received reservation number Key value and a time value corresponding to the received time point in the TOTP generation dedicated app of the user terminal; Displaying the generated TOTP value on a display unit of a user terminal; Inputting the TOTP value displayed on the display unit of the user terminal on the keypad of the vehicle control apparatus on the keypad of the vehicle control apparatus or receiving a TOTP value from the user terminal through a short-range communication unit according to the user's selection; Generating a TOTP value in an internal TOTP generator by hashing a value obtained by combining a key value of reservation information stored and stored from the car-sharing service network server and a time value corresponding to the received time point; Comparing a TOTP value input through the keypad or a short-range communication unit with a value generated by the internal TOTP generation unit, in a comparison unit of the vehicle control device; And if the result of comparing the TOTP value input through the keypad or the short-range communication unit in the comparison unit with the value generated by the internal TOTP generation unit is within a valid range, the user of the user terminal is authenticated as a useful carsharing user and controls the vehicle. It may include; allowing the control of the internal device of the vehicle by the control unit of the device.

A TOTP-based car sharing vehicle control authentication method according to an embodiment for realizing the object of the present invention includes: performing a car sharing vehicle reservation through a car sharing service network server in a user terminal; Receiving a reservation number key value from a car sharing service network server as a result of performing the reservation; Generating a TOTP value by hashing a value obtained by combining the VID or MDN value of the vehicle and a time value corresponding to the time point at which the value is input in the TOTP generation exclusive app of the user terminal; Displaying the generated TOTP value on a display unit of a user terminal; Inputting the TOTP value displayed on the display unit of the user terminal on the keypad of the vehicle control apparatus on the keypad of the vehicle control apparatus or receiving a TOTP value from the user terminal through a short-range communication unit according to the user's selection; Generating a TOTP value in an internal TOTP generator by hashing a value obtained by combining a VID or MDN value in an internal TOTP generator of the vehicle control device and a time value corresponding to the input time point; Comparing a TOTP value input through the keypad or a short-range communication unit with a value generated by the internal TOTP generation unit, in a comparison unit of the vehicle control device; And if the result of comparing the TOTP value input through the keypad or the short-range communication unit in the comparison unit with the value generated by the internal TOTP generation unit is within a valid range, the user of the user terminal is authenticated as a useful carsharing user and controls the vehicle. It may include; allowing the control of the internal device of the vehicle by the control unit of the device.

In one embodiment, if the internal clock is initialized in the vehicle control device and the internal TOTP generator cannot operate normally, the vehicle control device requests time information from a user terminal to receive time information, and It may further include the step of generating a TOTP value in the internal TOTP generator by inputting the VID or MDN to the TOTP generator and hashing a value obtained by combining the time values received from the user terminal.

The effect of the present invention is first, since data communication with a separate server is not required to generate the TOTP value for authentication of the present invention, the control speed is fast and power saving is possible.

Second, by excluding the use of TCP/IP and SMS used in the existing method, it is possible to reduce the communication cost and widen the range of available communication products.

Third, in the case of using a simple combination with a PIN code method for user authentication, there is an effect of increasing the reliability of security by using TOTP, which is a one-time password based on time.

However, the effects of the present invention are not limited to the above effects, and may be variously extended without departing from the spirit and scope of the present invention.

1 is a schematic configuration diagram of a TOTP-based car sharing vehicle control authentication system according to an embodiment of the present invention.

2 is an internal configuration diagram of a user terminal of a TOTP-based car sharing vehicle control authentication system.

3 is an internal configuration diagram of a vehicle control device of a TOTP-based car sharing vehicle control authentication system.

4(a) to (c) are flowcharts illustrating a TOTP-based car sharing vehicle control authentication method.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the drawings.

In the present invention, various modifications may be made and various forms may be applied, and specific embodiments will be illustrated in the drawings and described in detail in the text. However, this is not intended to limit the present invention to a specific form disclosed, it should be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention.

1, the TOTP-based car-sharing vehicle control authentication system 1 is a user terminal 10 installed with a dedicated app for car-sharing service application and user authentication, and communication with the user terminal is possible. It may be composed of a car sharing service network server 20 that provides a reservation number and vehicle information for a sharing service application, and a vehicle control device 30 for authentication of a car sharing service user and control of a vehicle internal device.

The user terminal 10 can reserve a car sharing service through a communication network with the car sharing service network server 20.

The car-sharing service network server 20 may transmit vehicle information for a car-sharing service reservation received through the user terminal and a reservation number key value to the user terminal 20.

In addition, the vehicle control device 30 may receive a key value for a reservation number for a car sharing service requested by the user terminal 10 through the car sharing service network server 20 and a communication network.

The communication network provides a data movement path between the user terminal 10, the car sharing service network server 20, and the vehicle control device 30, and in detail, a wired/wireless network such as a wide area network (WAN), It can be composed of mobile communication network, LTE, etc.

The user terminal 10 and the vehicle control device 30 can communicate with each other through a local area network.

The local area network may be composed of Wi-Fi, Bluetooth, Zig-bee, wired cable, and the like.

The TOTP-based means using an authentication algorithm implementing Time-Based One-Time Passwords or RFC 6238.

2 is a block diagram of a user terminal 10 of a TOTP-based car sharing vehicle control authentication system for a car sharing service.

The user terminal 10 includes a communication unit 11 for communicating with the car sharing service network server 20 to reserve a car sharing vehicle.

The communication unit may communicate through a wired or wireless network such as a wide area network (WAN), a mobile communication network, or an LTE network.

Through the communication unit, the car-sharing service network server 20 may receive a reservation number key value received while making a reservation for a car-sharing vehicle.

The user terminal 10 hashes the combined value by combining the received reservation number Key value and the received time value using a cryptographic hash function algorithm such as SHA-1 (Secure Hash Algorithm-1). It includes a dedicated app 13 that generates TOTP values.

Referring to FIG. 2, the exclusive app 13 of the user terminal 10 generating the TOTP value does not separately receive the reservation number key value from the network server, and the reserved vehicle's VID (Vehicle ID) or MDN (Mobile Directory) Number) can be used as a value to generate a TOTP value by using a unique number assigned to the vehicle.

If you use a unique number assigned to the vehicle, such as VID (Vehicle ID) or MDN (Mobile Directory Number) of the reserved vehicle, separate data communication is not required for TOTP generation, thus saving communication charges and reducing remote communication-based network latency and SMS Discomfort caused by the non-real-time nature of the device can be resolved.

In addition, since it is not always necessary to maintain a connection with the car sharing service network server 20, it can be considered that power reduction is possible.

In the dedicated app 13, any one of the reservation number key value, VID, or MDN and the received or input time values are combined.

The combined value is hashed using a cryptographic hash function algorithm such as SHA-1 (Secure Hash Algorithm-1) to generate a TOTP value.

The TOTP value is an authentication value used for vehicle control device 30 and carsharing user authentication, and is not separately received from the carsharing service network server 20, but a reservation number key value, VIN or MDN in the user terminal 10. It is to be created by itself in real-time by using etc.

Therefore, the reliability of security may be higher than when user authentication is performed using a simple combination with the existing PIN code method.

The finally generated TOTP value may be displayed on the display unit 14 of the user terminal 10.

In addition, it may be configured with a short-range communication unit 12 for transmitting the generated TOTP value to an external device.

The short-range communication unit 12 may communicate through a communication network such as Wi-Fi, Bluetooth, Zig-bee, and a wired cable network.

3 is a block diagram of a vehicle control device 30 of a TOTP-based car sharing vehicle control authentication system 1 for a car sharing service.

The vehicle control device is provided with a keypad 33 to input the TOTP value displayed on the display unit 14 of the user terminal 10.

In addition, the vehicle control device 30 is provided with a short-range communication unit 32 to receive the generated TOTP value through the short-range communication unit 12 of the user terminal 10.

The short-range communication unit 32 may communicate through a communication network such as Wi-Fi, Bluetooth, Zig-bee, and a wired cable network.

The method of receiving the TOTP value generated by the user terminal using the keypad 33 or the short-range communication unit 32 can be selected as a user option.

The vehicle control device 30 includes a communication unit 31 to communicate with the car sharing service network server 20 to receive a key value of the car sharing vehicle reservation number.

The communication unit 31 is capable of communicating through a wired/wireless network such as a wide area network (WAN), a mobile communication network, and an LTE network.

Through the communication unit 31, a reservation number Key value generated while a user makes a reservation for a car sharing vehicle may be received from the car sharing service network server.

The vehicle control device 30 includes an internal TOTP generator 34 that combines the received reservation number Key value and the received time value and hash the combined value to generate a TOTP value.

Referring to FIG. 3, the internal TOTP generation unit 34 that generates the TOTP value does not separately receive the reservation number key value from the network server 20, but the VID (Vehicle ID) or MDN (Mobile Directory Number) of the reserved vehicle ), it can be used as a value to generate the TOTP value by using the unique number assigned to the vehicle.

If you use the unique number assigned to the vehicle, such as VID (Vehicle ID) or MDN (Mobile Directory Number) of the reserved vehicle, separate data communication is not required to generate the TOTP value, thus saving communication charges and reducing network latency and The inconvenience caused by SMS's impracticality can be resolved.

In addition, since it is not necessary to always maintain a connection with the car sharing service network server, it can be considered that power reduction is possible.

The internal TOTP generation unit 24 combines the reservation number key value, VID, or MDN value with the received or input time value.

The generated TOTP value is an authentication value used for authentication of the vehicle control device 30 and the car sharing user, and is not separately received from the car sharing service network server 20, but a reservation number key value in the vehicle control device 30, It is to be created by itself in real time by using VIN or MDN.

Accordingly, the comparison unit 35 of the vehicle control device 30 compares the TOTP value input through the keypad 33 or the short-range communication unit 32 with the value generated by the internal TOTP generation unit 24.

At this time, in the comparison unit 35, a difference from the value generated by the TOTP generation unit 34 in the vehicle control device 30 may occur due to a time difference from the time when the user terminal 10 generated the TOTP. Considering that there is, the allowable time range can be set. For example, an allowable time range may be set in the comparison unit 35 in units of 10 seconds, units of 1 minute, and units of 10 minutes.

In consideration of up to the allowable time range set by the comparison unit 35, a result of comparing the TOTP value input through the keypad 33 or the short-range communication unit 32 with the value generated by the internal TOTP generation unit 34 is If within the useful range, the user of the user terminal can be authenticated as a useful carsharing service user.

If authenticated as the useful carsharing user, the control unit 36 of the vehicle control device 30 is allowed to control various internal devices of the vehicle.

During the TOTP-based car sharing vehicle control authentication process, if the internal clock of the vehicle control device 30 (RTC: Real Time Clock) is reset, the vehicle control device 30 to the user terminal 10 Time information is requested, the corresponding time information is transmitted, and based on this, the time value and the reservation number key value transmitted from the user terminal 10 to the internal TOTP generation unit 34 of the vehicle control device 30, VID or MDN The problem can be solved by hashing a value obtained by combining any one of the values and generating a TOTP value in the internal TOTP generator 34.

4(a) is a flowchart of a case of using a key value of a car-sharing service reservation number for TOTP-based car-sharing vehicle control authentication.

The user terminal 10 reserves a car sharing vehicle through the car sharing service network server 20 (S40). As a result of performing the reservation, a reservation number key value is received from the car sharing service network server 20 (S41).

The car sharing service network server 20 simultaneously transmits the reservation number key value to the vehicle control device 30 (S42).

In the TOTP generation dedicated app 13 of the user terminal, a value obtained by combining the received reservation number Key value and the time value corresponding to the received time is a cryptographic hash function algorithm such as SHA-1 (Secure Hash Algorithm-1). The TOTP value is generated by hashing by using (S43).

The generated TOTP value is displayed on the display unit 14 of the user terminal 10 (S44).

According to the user's selection, the TOTP value displayed on the display unit 14 of the user terminal 10 on the keypad of the vehicle control device 30 is input to the keypad 33 of the vehicle control device 30 or the user The TOTP value is inputted from the terminal through the short-range communication unit 32 (S45).

The TOTP value is generated by the internal TOTP generator 34 by hashing a value obtained by combining the key value of the reservation information stored and stored from the car sharing service network server and a time value corresponding to the received point in time (S46).

Accordingly, the comparison unit 25 of the vehicle control device 20 compares the TOTP value input through the keypad 23 or the short-range communication unit 22 with the value generated by the internal TOTP generation unit 24 ( S47).

At this time, in the comparison unit 25, a difference from the value generated by the TOTP generation unit 24 in the vehicle control device 20 may occur due to a time difference from the time when the user terminal 10 generated the TOTP. Considering that there is, the allowable time range can be set. For example, an allowable time range may be set in the comparison unit 25 in units of 10 seconds, units of 1 minute, and units of 10 minutes.

In consideration of up to the allowable time range set by the comparison unit 35, a result of comparing the TOTP value input through the keypad 33 or the short-range communication unit 32 with the value generated by the internal TOTP generation unit 34 is If within the valid range, the user of the user terminal is authenticated as a useful carsharing service user.

If authenticated as the useful car sharing user, the control unit 36 of the vehicle control device is allowed to control various internal devices of the vehicle (S48).

4(b) is a flowchart of a case of using a vehicle VID or MDN for TOTP-based car sharing vehicle control authentication.

The user terminal 10 communicates with the car sharing service network server 20 using the communication unit 11 to reserve a car sharing vehicle (S50). As a result of performing the reservation, the reservation number key value is received from the car sharing service network server 20 (S51).

In the TOTP generation dedicated app 13 of the user terminal, a value obtained by combining the VID or MDN of the vehicle and a time value corresponding to the time point at which the VID or MDN is input is a password such as SHA-1 (Secure Hash Algorithm-1). The TOTP value is generated by hashing using the school hash function algorithm (S52).

The generated TOTP value is displayed on the display unit 14 of the user terminal 10 (S53).

According to the user's selection, the TOTP value displayed on the display unit 14 of the user terminal 10 on the keypad of the vehicle control device 30 is input to the keypad 33 of the vehicle control device 30 or the user The TOTP value is inputted from the terminal through the short-range communication unit 32 (S54).

VID or MDN is input to the internal TOTP generation unit of the vehicle control device, and a value obtained by combining the time value corresponding to the time point at which the value is input is hashed to generate a TOTP value in the internal TOTP generation unit 34 (S55). .

Accordingly, the comparison unit 25 of the vehicle control device 20 compares the TOTP value input through the keypad 23 or the short-range communication unit 22 with the value generated by the internal TOTP generator 24 (S56). ).

In consideration of up to the allowable time range set by the comparison unit 35, a result of comparing the TOTP value input through the keypad 33 or the short-range communication unit 32 with the value generated by the internal TOTP generation unit 34 is If it is within the valid range, the user terminal user is authenticated as a useful carsharing user.

If authenticated as the useful car sharing user, the controller 36 of the vehicle control device is allowed to control various internal devices of the vehicle (S57).

In order for the vehicle control device 30 to generate a TOTP value for authentication, a separate data communication with the car-sharing service network server 20 is not required, so the control speed is fast and power saving is possible.

4(c) is a flow chart showing a countermeasure for an abnormal case in which the internal clock (RTC: Real Time Clock) of the vehicle control device 30 is reset in the TOTP-based car sharing vehicle control authentication process. (Example limited to the case of using the vehicle's VID or MDN).

The user terminal 10 uses the communication unit 11 to reserve a car sharing vehicle through communication with the car sharing service network server 20 (S60). As a result of performing the reservation, the reservation number key value is received from the car sharing service network server 20 (S61).

In the TOTP generation dedicated app 13 of the user terminal, a value obtained by combining the VID or MDN of the vehicle and a time value corresponding to the time point at which the VID or MDN is input is a password such as SHA-1 (Secure Hash Algorithm-1). The TOTP value is generated by hashing using the hash function algorithm (S62).

The generated TOTP value is displayed on the display unit 14 of the user terminal 10 (S63).

According to the user's selection, the TOTP value displayed on the display unit 14 of the user terminal 10 on the keypad of the vehicle control device 30 is input to the keypad 33 of the vehicle control device 30 or the user The TOTP value is inputted from the terminal through the short-range communication unit 32 (S64).

When it is confirmed that the internal clock of the vehicle control device is initialized and the internal TOTP generator 34 cannot operate normally, the vehicle control device 30 transmits a time information request message to the user terminal 10 (S65).

In response to the message, current time information is received from the user terminal 10 (S66).

By inputting VID or MDN into the internal TOTP generation unit 34 of the vehicle control device 30 and hashing the combined time value transmitted from the user terminal 10, the TOTP value in the internal TOTP generation unit 34 To generate (S67).

Accordingly, the comparison unit 35 of the vehicle control device 30 compares the TOTP value input through the keypad 33 or the short-range communication unit 32 with the value generated by the internal TOTP generation unit 34 (S68). ).

At this time, in the comparison unit 35, a difference from the TOTP value generated by the internal TOTP generation unit 34 in the vehicle control device 30 may occur due to a time difference from the time when the user terminal 10 generates the TOTP. Taking this into account, the allowable time range can be set. For example, an allowable time range may be set in the comparison unit 25 in units of 10 seconds, units of 1 minute, and units of 10 minutes.

If authenticated as the useful car-sharing user, the control unit 36 of the vehicle control device 30 is allowed to control various internal devices of the vehicle (S69).

Even in an emergency situation in which the clock of the vehicle control device is initialized in the same manner as in 4(c), authentication for the car sharing user can be stably executed.

In the present invention, since data communication with a separate server is not required to generate a TOTP value for authentication, the control speed is fast and power saving is possible.

In addition, there is an effect of increasing the reliability of security due to a TOTP generation method that can become a one-time password based on time, rather than a simple combination of a PIN code method for user authentication.

Although described with reference to the above embodiments, those skilled in the art will understand that various modifications and changes can be made to the present invention without departing from the spirit and scope of the present invention described in the following claims. I will be able to.

Claims

A communication unit for communicating with a car sharing service network server;

Time-Based One-Time Passwords (TOTP) which is a time-based one-time password by hashing the car-sharing vehicle reservation through the communication unit, combining the reservation number Key value received from the network server and the time value corresponding to the time point received. TOTP generation-only app that generates values;

A display unit for displaying the generated TOTP value; And

A user terminal configured with a short-range communication unit for transmitting the generated TOTP value to an external device; And

A keypad for inputting a TOTP value displayed on the display unit of the user terminal or a short-range communication unit for receiving a TOTP value from the user terminal through short-range communication;

A communication unit for receiving a key value of a user's car sharing reservation number by communicating with the car sharing service network server;

An internal TOTP generator for generating a TOTP value, which is a time-based one-time password, by combining the received reservation number Key value and a time value corresponding to a time point at which the key value is received, and hashing;

A comparison unit comparing a TOTP value input through the keypad or a short-range communication unit with a value generated by the internal TOTP generation unit; And

A TOTP-based car-sharing vehicle control, characterized in that it comprises a vehicle control device comprising a control unit that controls the vehicle by authenticating a user of the user terminal as a useful car-sharing service user if the comparison result value is within a valid range in the comparison unit. Authentication system.
The TOTP-based car sharing vehicle control authentication system of claim 1, wherein the use of a keypad for inputting the TOTP value or a short-range communication unit for receiving a TOTP value from the user terminal is selectable by the user. .
The method of claim 1, wherein the user terminal and the vehicle control device do not separately receive a reservation number key value from a network server, and a unique number assigned to a vehicle such as VID (Vehicle ID) or MDN (Mobile Directory Number) of the reserved vehicle. TOTP-based car sharing vehicle control authentication system, characterized in that it can be used as a value for generating a TOTP value by using.
The TOTP of claim 1, wherein a SHA-1 (Secure Hash Algorithm-1) cryptographic hash function algorithm is used to hash in the TOTP generation exclusive app of the user terminal and the internal TOTP generation unit of the vehicle control device. Based car sharing vehicle control authentication system.
The method of claim 1, wherein in order to prevent authentication failure due to different time values used by the user terminal and the vehicle control device, a time window size for the time value is set in a comparison unit of the vehicle control device. TOTP-based car sharing vehicle control authentication system, characterized in that the effective range of the TOTP value can be adjusted.
The method of claim 1, wherein the communication unit provides a data movement path between the user terminal, the car sharing network server, and the vehicle control device, and through a wired or wireless network such as a wide area network (WAN), a mobile communication network, an LTE network, etc. TOTP-based car sharing vehicle control authentication system, characterized in that communication is possible.
The TOTP-based car sharing according to claim 1, wherein the short-range communication unit is capable of communicating through a communication network such as Wi-Fi, Bluetooth, Zig-bee, and wired cable. Vehicle control authentication system.
Making a reservation for a car-sharing vehicle through a car-sharing service network server in a user terminal;

Receiving a reservation number key value from a car sharing service network server as a result of performing the reservation;

Transmitting, by the car sharing service network server, the reservation number key value to a vehicle control device at the same time;

Generating a TOTP value, which is a time-based one-time password, by hashing a value obtained by combining the received reservation number Key value and a time value corresponding to the received time point in the TOTP generation dedicated app of the user terminal;

Displaying the generated TOTP value on a display unit of a user terminal;

Inputting the TOTP value displayed on the display unit of the user terminal on the keypad of the vehicle control apparatus on the keypad of the vehicle control apparatus or receiving a TOTP value from the user terminal through a short-range communication unit according to the user's selection;

Generating a TOTP value, which is a time-based one-time password, in an internal TOTP generator by hashing a value obtained by combining a key value of reservation information stored and stored from the car sharing service network server and a time value corresponding to the received time point;

Comparing a TOTP value input through the keypad or a short-range communication unit with a value generated by the internal TOTP generation unit, in a comparison unit of the vehicle control device; And

If the comparison unit compares the TOTP value inputted through the keypad or the short-range communication unit with the value generated by the internal TOTP generation unit, the user of the user terminal is authenticated as a useful car sharing user, and the control unit of the vehicle control device Allowing the control of the internal device of the vehicle; TOTP-based car sharing vehicle control authentication method comprising a.
The TOTP of claim 8, wherein a SHA-1 (Secure Hash Algorithm-1) cryptographic hash function algorithm is used for hashing in the TOTP generation exclusive app of the user terminal and the internal TOTP generation unit of the vehicle control device. Based car sharing vehicle control authentication system.
The method of claim 8, wherein in order to prevent authentication failure due to different time values used in the user terminal and the vehicle control device, a time window size for the time value is set in a comparison unit of the vehicle control device. TOTP-based car sharing vehicle control authentication method, characterized in that the effective range of the TOTP value can be adjusted.
The vehicle control apparatus of claim 8, wherein if the internal clock is initialized in the vehicle control device and the internal TOTP generation unit cannot operate normally, the vehicle control apparatus requests time information from a user terminal to receive time information, and The TOTP generation unit hashing a value obtained by combining a key value of reservation information stored and stored from the car sharing service network server and a time value received from the user terminal to generate a TOTP value in the internal TOTP generation unit. TOTP-based car sharing vehicle control authentication method characterized by.
Performing a car-sharing vehicle reservation through a car-sharing service network server in a user terminal;

Receiving a reservation number key value from a car sharing service network server as a result of performing the reservation;

Generating a TOTP value, which is a time-based one-time password, by hashing a value obtained by combining the VID or MDN value of the vehicle and the time value corresponding to the time point at which the value is input in the TOTP generation exclusive app of the user terminal;

Displaying the generated TOTP value on a display unit of a user terminal;

Inputting the TOTP value displayed on the display unit of the user terminal on the keypad of the vehicle control apparatus on the keypad of the vehicle control apparatus or receiving a TOTP value from the user terminal through a short-range communication unit according to the user's selection;

In the internal TOTP generation unit of the vehicle control device, the VID or MDN value is input, and a value obtained by combining the time value corresponding to the time point at which the value is input is hashed to generate a TOTP value, which is a time-based one-time password. step;

Comparing a TOTP value input through the keypad or a short-range communication unit with a value generated by the internal TOTP generation unit, in a comparison unit of the vehicle control device; And

If the comparison unit compares the TOTP value input through the keypad or the short-range communication unit with the value generated by the internal TOTP generation unit and the value is within a valid range, the user of the user terminal is authenticated as a useful car sharing user, and the vehicle control device Allowing the control of the internal device of the vehicle by the control unit of; TOTP-based car sharing vehicle control authentication method comprising a.
The method of claim 12, wherein if the internal clock is initialized in the vehicle control device and the internal TOTP generator cannot operate normally, the vehicle control device requests time information from a user terminal to receive time information, and A TOTP-based car-sharing vehicle, further comprising the step of generating a TOTP value in an internal TOTP generator by inputting a VID or MDN to a TOTP generator and hashing a combined value of a time value received from the user terminal. Control authentication method.