WO2021132756A1

WO2021132756A1 - System for preventing hacking of internet of things

Info

Publication number: WO2021132756A1
Application number: PCT/KR2019/018438
Authority: WO
Inventors: 나정환
Original assignee: 주식회사 성강이지에스; 나정환
Priority date: 2019-12-26
Filing date: 2019-12-26
Publication date: 2021-07-01

Abstract

The present invention relates to a system for preventing the hacking of the internet of things, and more specifically, to a system which allows only a registered terminal to be used for externally controlling a plurality of internal devices connected in the manner of the internet of things, and prevents a connection from being made through the impersonation of the registered terminal, and thus can reliably prevent the hacking of the internet of things. The present invention for achieving the above purpose is characterized by comprising: a plurality of internal devices connected to each other through communication; a main control device connected to the internal devices through communication; and a terminal that is connected to the main control device and controls the internal devices, wherein only the terminal which is registered by having information about the terminal stored in the main control device can connect to the main control terminal.

Description

Internet of Things Hacking Prevention System

The present invention relates to an IoT hacking prevention system, and more particularly, a situation in which only a registered terminal can be used in order to externally control a plurality of internal devices connected in an Internet of Things method, and a situation in which a registered terminal is impersonated It relates to an IoT hacking prevention system that can prevent hacking and reliably prevent hacking.

In general, the Internet of Things (IoT) is an environment in which all things in life are connected through a wired/wireless network to share information. The Internet of Things is an intelligent technology and service that communicates information between people and things and between things and things. to provide.

According to the Internet of Things, it is possible to share information by connecting objects through a network, not only in home appliances and electronic devices, but also in various fields such as healthcare, remote meter reading, smart home, and smart car.

Also, although the Internet of Things is similar to the existing ubiquitous or M2M (Machine to Machine: Machine to Machine), the concept of M2M, whose main purpose is to communicate with communication equipment and people, is extended to the Internet, so that not only objects but also real and virtual It can be said that it is a stage that has evolved into a concept that interacts with all information in the world.

The IoT is applied to a home automation system, and the home automation system may communicate with and control a thing (eg, a plurality of digital devices) included in the system using the Internet of Things.

Here, as an example of a home automation system using the Internet of Things, the technology described in Korean Patent No. 10-1438769 as shown in FIGS. 1 and 2 has been proposed, and its technical features are the wall pad ( 100), the common entrance unit 110 installed in the common entrance of each building, the security office unit 120 installed in the security room in the complex, and various devices controlled by them are connected through a wired communication network of RS-485 or RS-422. The built-in home automation system 200, the main unit 210 for integrated management of the home automation system 200, a DB server 220 for remote management, and an administrator PC 230 connected to the DB server 220 through an Ethernet communication network. ), including; The main device 210 includes a first communication unit 212 having an RS-485 or RS-422 communication module so as to be connected to the wired communication network, and a first communication unit having an Ethernet communication module for communication with the DB server 220 . 2 The communication unit 213 and the flow of the communication protocol of the wired communication network are monitored to manage the home automation system 200 and control the wall pad 100, the common entrance unit 110, the actual security unit 120 and from them. and a control unit 214 capable of controlling various receiving devices, wherein the DB server 220 stores and updates the monitoring result received from the main unit 210 and stores and updates the control information received from the manager PC 230 . The DB management module 221 that stores and manages and transmits the monitoring result received from the main device 210 to the DB management module 221 and transmits the control information received from the DB management module 221 to the main device 210 . It is characterized in that it comprises a main device control module (222).

However, the technology described in Korean Patent No. 10-1438769 has the advantage of being able to solve problems occurring in home automation from a remote PC through the Internet without visiting the site by combining the Internet of Things and the home automation system, but it is easy through an external communication network. There is a problem that it is difficult to prevent hacking because it can penetrate.

The present invention has been devised to solve the above problems, and an object of the present invention consists of a plurality of internal devices connected to each other through an internal communication network, and a main control device connected to and controlling the internal devices through an internal communication network, The main control device is to provide an IoT hacking prevention system that prevents hacking by storing information on terminals that can be accessed from the outside and allowing external access only to registered terminals.

And, another object of the present invention is that the main control device is provided with a storage unit to register the phone number of the terminal, and when a terminal such as a smartphone connects through a telephone communication network, the main control device confirms the phone number of the attempted connection and then , to provide an IoT hacking prevention system that can reliably block an attempt to access by impersonating a phone number by blocking access and re-connecting with the corresponding phone number.

The present invention for solving these problems;

It characterized in that it consists of a plurality of internal devices connected to each other by communication, a main control device connected to the internal device by communication, and a terminal connected to the main control device to control the internal device.

Here, the main control device is characterized in that the terminal information is stored and only the registered terminal can be accessed.

And, when the access request signal is received from the terminal, the main control device blocks the connection with the terminal requesting access, and when the terminal requesting access is a terminal registered in the main control device, the main control device requests access It is characterized in that it is connected by requesting access to the terminal.

In this case, the main control device stores the phone number of the registered terminal, and the main control device tries to access the registered phone number through the phone communication network.

In addition, the main control device is characterized in that the information of the terminal is stored, it is characterized in that by setting the authority of the terminal to limit the controllable internal devices.

And, the main control device is characterized in that it receives the information of the internal device in real time, and transmits the set information to the registered terminal.

According to the present invention having the above configuration, a plurality of internal devices connected to each other through an internal communication network and a main control device connected to and controlled by the internal devices and an internal communication network are provided, and the main control device can be accessed from the outside. There is an effect of preventing hacking by allowing external access only to the terminal that is stored and registered in the terminal information.

And, according to the present invention, the main control device is provided with a storage unit, the phone number of the terminal is registered, and when a terminal such as a smartphone connects through a telephone communication network, the main control device confirms the phone number of the terminal to which the connection was attempted, and then establishes the connection. By blocking and attempting to access the phone number again, there is an effect that can reliably block attempts to access by impersonating the phone number.

1 is a schematic diagram of a conventional home automation system using the Internet of Things.

2 is a block diagram showing the overall configuration of a conventional home automation system using the Internet of Things.

3 is a conceptual diagram of an IoT hacking prevention system according to the present invention.

4 is a block diagram of an IoT hacking prevention system according to the present invention.

5 is a flowchart showing a connection process of the IoT hacking prevention system according to the present invention.

6 is a block diagram showing an example in which the IoT hacking prevention system according to the present invention is applied to home automation.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings. The same reference numerals are used for the same components in the drawings, and repeated descriptions of the same components are omitted. And, it should be understood that the present invention may be implemented in many different forms and is not limited to the described embodiments.

3 is a conceptual diagram of the IoT hacking prevention system according to the present invention, FIG. 4 is a block diagram of the IoT hacking prevention system according to the present invention, and FIG. 5 is a connection process of the IoT hacking prevention system according to the present invention 6 is a block diagram showing an example in which the IoT hacking prevention system according to the present invention is applied to home automation.

The present invention relates to an Internet of Things (IoT) hacking prevention system, and as shown in FIGS. 3 to 6 , the configuration includes a plurality of internal devices 400 connected to each other by communication and a main connected to the internal devices 400 by communication. It consists of a control device 300 and a terminal 500 connected to the main control device 300 to control the internal device 400 .

Here, the internal device 400 is provided with an auxiliary communication module 410, respectively, are connected to each other using an internal communication network to exchange information with each other, and the main control device 300 is also an internal device ( 400 ) to receive information from the internal device 400 .

At this time, the main control device 300 is provided with a main communication module 310 to be connected to each internal device 400 as well as to the terminal 500 and an external communication network (external) through the main communication module 310 . Internet, telephone communication network, etc.), since the internal device 400 cannot be directly connected to an external communication network, the terminal 500 is connected to each internal device 400 through the main control device 300 to control it. do.

In addition, the main control device 300 stores the information of the main communication module 310 and the connectable terminal 500 for communication with each internal device 400 and the external terminal 500 as described above. It consists of a storage unit 320 that is.

Here, the main control device 300 is connected to each internal device 400 to receive the information of the internal device 400 in real time, the information set by the administrator among the information received from the internal device 400 is It is transmitted to the terminal 500 of the manager through the main communication module 310 .

That is, when the present invention is applied to home automation, the internal device 400 is composed of appliances used at home as shown in FIG. 6 , and as an example, a gas oven range, which is a household appliance 400 , is lit. When going out in the turned on state, the main control device 300 notifies the manager through the main communication module 310 by checking the overheating state through the temperature sensor provided in the gas range. By controlling the valve in the pipe to cut off the gas supply, it is possible to prevent a fire.

Of course, the technology of the present invention is not only applicable to home automation, and although not shown in the drawing, it is applicable to a general company or factory, etc., so that the information of each device constituting the company or factory is transmitted in real time to the main control device 300 It allows the administrator to respond quickly according to the situation by notifying the administrator only for the information received by the administrator and set by the administrator.

On the other hand, the main control device 300 is provided with a storage unit 320 to store the information of the terminal 500, the main control device 300 is stored in the storage unit 320 is a registered terminal ( Only 500 is allowed to connect to the main control device 300 through the main communication module 310 .

That is, when accessing the main control device 300 using the terminal 500, the unique information of the terminal 500 is transmitted together, so that the main control device 300 can specify the terminal 400 requesting access. Only the registered terminal 500 enables access.

And, looking at the process of accessing the main control device 300 through the terminal 500 from the outside, as shown in FIG. 5 , the terminal 500 transmits a connection request signal to the main control device 300 , and , when the main control device 300 receives the connection request signal transmitted from the terminal 500 , it first blocks the connection with the terminal 500 that has requested the connection.

Here, the main control device 300 checks the information of the terminal 500 that has requested access, and blocks the access if it is not the terminal 500 registered in the storage unit 320 provided in the main control device 300 . In the case where the terminal 500 that requested the connection is the terminal 500 registered in the storage 320, the main control device 300 makes a connection request to the terminal 500 that requested the connection. will connect

At this time, the phone number of the terminal 500 is stored in the storage unit 320 of the main control device 300, and the phone number of the terminal 500 that has requested access can be checked to determine whether it is a registered terminal 500. In addition, when a connection request is made to the terminal 500, the connection is requested through a registered phone number.

Therefore, when an external person tries to connect to the main control device 300 through the terminal 500, if an outsider uses the unregistered terminal 500, it can be blocked, so only a registered administrator accesses the internal device 400 ) can be controlled.

That is, these days, there are often cases where the caller number is impersonated. Even if access is attempted by impersonating the caller number as a registered phone number, the connection is once blocked when an access request is made, and the main control device 300 reconnects with the caller number. Since the request signal is transmitted, the connection request signal does not go to the terminal 500 masquerading as a phone number, so that even if an attempt is made to access the impersonated phone number, it can be blocked.

Of course, the main communication module 310 of the main control device 300 not only enables general communication, but also has a modem function to enable connection through a telephone communication network, and the terminal 500 is also made of a smartphone. An application capable of a modem function is installed to enable communication with the main control device 300 .

Meanwhile, information of the terminal 500 is stored in the storage unit 320 of the main control device 300 , and the storage unit 320 limits the internal device 400 that can be controlled for each terminal 500 . You can also set permissions.

That is, in the case of home automation, there is no problem even if all family members are set as administrators and permissions are set to be able to control all internal devices 400, but in a large place such as a company or factory, one manager can Because it is impossible to control, there are several managers. By setting the limit of the internal device 400 that can be controlled differently for each manager, a general problem is that a lower-ranking manager can control it, but important secrets of the company or factory It is possible to prevent the leakage of confidential information by blocking the access of low-ranking managers.

Although preferred embodiments of the present invention have been described above, the scope of the present invention is not limited thereto, and the scope of the present invention extends to those substantially equivalent to the embodiments of the present invention. Various modifications are possible by those of ordinary skill in the art to which the invention pertains without departing from the scope of the invention.

Claims

A plurality of internal devices connected to each other by communication,

a main control device connected by communication with the internal device;

Internet of Things (IoT) hacking prevention system, characterized in that the terminal is connected to the main control device to control the internal device.
According to claim 1,

Internet of Things (IoT) hacking prevention system, characterized in that the main control device stores terminal information and only registered terminals can access it.
3. The method of claim 2,

When the connection request signal is received from the terminal, the main control device blocks the connection with the terminal requesting access,

If the terminal requesting access is a terminal registered in the main control device, the main control device requests access to the terminal requesting access and connects to the terminal.
4. The method of claim 3,

The main control device stores the phone number of the registered terminal,

The main control device is an Internet of Things (IoT) hacking prevention system, characterized in that it attempts to access a registered phone number through a telephone communication network.
3. The method of claim 2,

The main control device stores information of the terminal,

Internet of Things (IoT) hacking prevention system, characterized in that it limits the internal devices that can be controlled by setting the authority of the terminal.
According to claim 1,

The main control device receives the information of the internal device in real time, and transmits the set information to the registered terminal.