KR101769895B1 - User terminal device, Internet of Things control method, computer program and storage medium therefor - Google Patents

Abstract

Disclosure of Invention Technical Problem [8] The present invention has been proposed in order to solve the above-described problems of the related art, and it is an object of the present invention to securely access various kinds of object internet devices through a user terminal device carried by a user, The present invention relates to a user terminal device capable of easily changing a dynamic parameter of an object Internet appliance, a method of controlling a object Internet appliance using the same, a computer program for performing the method, and a computer readable recording medium storing the computer program, Based trust in the process of constructing the same network as the terminal device and sharing the authentication information necessary for linking with the object Internet service server so that the user terminal device remotely controls the object Internet device, Or the status of the data.

Description

Technical Field [0001] The present invention relates to a user terminal device, a method for controlling the Internet device using the same, a computer program for performing the method, and a computer readable recording medium storing the computer program.

More particularly, the present invention relates to a method and apparatus for securely accessing various types of Internet devices through a user terminal carried by a user to control the registration and authentication processes of the Internet devices, A user terminal device for allowing a user to easily change a dynamic parameter of the device, a method for controlling an object Internet device using the same, a computer program for performing the method, and a computer readable recording medium storing the computer program.

The Internet of Things (IoT) refers to the technology of connecting sensors and communication functions to various objects and connecting them to the Internet. Here, things become various embedded systems such as household appliances, mobile equipment, and wearable computers. A device connected to the Internet (hereinafter, referred to as a device for Internet connection) must be connected to the Internet with a unique IP capable of distinguishing itself, and a sensor may be incorporated to acquire data from the external environment.

This kind of internet is used, for example, to analyze the manufacturing process in the industrial field and to monitor facilities to manage work efficiency and safety, or to monitor the condition of the vehicle by connecting the vehicle to the Internet to support safe and convenient operation And can be used in various fields such as prevention of disaster or disaster by using Internet information of objects such as CCTV and GPS.

The above-described technical setting of the Internet of Things may include object identification, communication network establishment, sensibility to objects, and controllability. In order to realize such a technical setting, a plurality of object Internet devices communicate with each other through a communication network Accessing the Internet service platform, and linking with the Internet service platform.

However, since the object Internet device normally constructed is built on the basis of miniaturization and low power consumption, only a small number of buttons (power button, etc.) are provided and means for a high-end UI (User Interface) There are many cases in which an input / output means such as a touch screen or an LCD is not provided.

Therefore, in the past, setting information such as a Wi-Fi AP (access point) setting, a password setting, a server connection information (for example, an IP address and a port number) It was difficult to change.

In addition, unlike a user terminal device such as a smart phone, a lot of kinds of devices are being introduced by various developers, and a method for universally controlling or interworking these heterogeneous devices is required.

Korean Registered Patent No. 10-1362384, February 06, 2014 (Name: IP-based IoT Browsing Method and System Using Web Platform)

Disclosure of Invention Technical Problem [8] The present invention has been proposed in order to solve the above-described problems of the related art, and it is an object of the present invention to securely access various kinds of object internet devices through a user terminal device carried by a user, A user terminal device for easily changing the dynamic parameters of the object Internet device, a method for controlling the object Internet device using the same, a computer program for performing the method, and a computer readable recording medium on which the computer program is recorded.

More particularly, the present invention relates to a user terminal device capable of changing dynamic parameters of an object Internet device while performing a network setting process of the object internet device without changing the firmware of the object internet device, And a computer readable recording medium storing the computer program.

In addition, the present invention establishes a location-based trust relationship in the process of configuring the object Internet device and the user terminal device in the same network, and shares the authentication information required for interworking with the object Internet service server, A user terminal device that controls a thing Internet device and enables status or data of a thing Internet device to be inquired, a method of controlling a things Internet device using the same, a computer program for performing the method, and a computer readable recording medium on which the computer program is recorded .

The present invention provides a method of solving the above-mentioned problems, comprising the steps of: requesting a wireless access device to broadcast access information for communication between a destination Internet device and a user terminal device to a peripheral device in communication coverage; Receiving registration-related information for device registration transmitted from the object Internet device that has received the broadcasted access information based on the access information through the wireless access device; Requesting the object Internet service server to register and authenticate the object Internet appliance on behalf of the object internet appliance that has transmitted the registration related information; Receiving registration result information and authentication result information from the object Internet service server; And transmitting the received authentication result information and the connection information of the object Internet service server to the object Internet apparatus through the wireless connection apparatus, wherein the object Internet apparatus transmits the connection information of the object Internet service server and the authentication And the resultant information is used to connect to the object Internet service server to send and receive data.

In addition, the object Internet device control method using the user terminal device described above can be implemented by a computer program and stored in a computer-readable recording medium.

According to another aspect of the present invention, there is provided a communication system comprising: a communication unit for supporting at least one communication method including a short-range wireless communication method to transmit and receive data through the at least one communication method; Requesting the wireless access device capable of communicating through the short-range wireless communication method to broadcast connection information for communication with the object Internet device, and then receiving registration-related information for device registration from the object Internet device that has received the access information And transmits the registration related information to the object Internet service server to request registration and authentication, and upon receiving the authentication result information from the object internet service server corresponding to the registration result information, A control unit for controlling transmission to the object Internet device; And a storage unit for storing at least one of connection information for communication with the object Internet equipment, registration related information of the object internet equipment, and authentication result information.

The present invention can safely access various types of Internet devices through a user terminal carried by the user, thereby controlling the registration and authentication process of Internet devices and changing the dynamic parameters of the Internet devices.

In particular, the present invention can change the dynamic parameters of the object Internet device while performing the network setting process of the object internet device without changing the firmware of the object Internet device, Based trust relationship and establishes a trust relationship with the object Internet service server to share the authentication information required for interworking with the object Internet service server so that the user terminal device controls the object Internet appliance remotely and inquires the status or data of the object Internet appliance .

FIG. 1 is a block diagram illustrating a schematic structure of an object Internet service system according to the present invention.
FIG. 2 is a block diagram illustrating the configuration of an Internet appliance according to the present invention.
3 is a block diagram illustrating a configuration of a user terminal according to the present invention.
FIG. 4 is a block diagram illustrating a configuration of an Internet service server according to the present invention.
FIG. 5 is a flowchart illustrating a process of registering and authenticating an object Internet device, among objects Internet device control methods in a object Internet service system according to the present invention.
FIG. 6 is a flowchart illustrating a remote control process of the Internet appliance of object among the Internet appliance control method in the Internet service system according to the present invention.
FIG. 7 is a flowchart illustrating an interworking control process of an object Internet device among the object Internet device control methods in the object Internet service system according to the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description and the accompanying drawings, detailed description of well-known functions or constructions that may obscure the subject matter of the present invention will be omitted. It should be noted that the same constituent elements are denoted by the same reference numerals as possible throughout the drawings.

The terms and words used in the present specification and claims should not be construed to be limited to ordinary or dictionary meanings and the inventor is not limited to the concept of terminology for describing his or her invention in the best way. It should be interpreted as meaning and concept consistent with the technical idea of the present invention. Therefore, the embodiments described in the present specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention, and not all of the technical ideas of the present invention are described. Therefore, It is to be understood that equivalents and modifications are possible.

Also, terms including ordinal numbers such as first, second, etc. are used to describe various elements, and are used only for the purpose of distinguishing one element from another, Not used. For example, without departing from the scope of the present invention, the second component may be referred to as a first component, and similarly, the first component may also be referred to as a second component.

In addition, when referring to an element as being "connected" or "connected" to another element, it means that it can be connected or connected logically or physically. In other words, it is to be understood that although an element may be directly connected or connected to another element, there may be other elements in between, or indirectly connected or connected.

Also, the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. It is also to be understood that the terms such as " comprising "or" having ", as used herein, are intended to specify the presence of stated features, integers, It should be understood that the foregoing does not preclude the presence or addition of other features, numbers, steps, operations, elements, parts, or combinations thereof.

In addition, embodiments within the scope of the present invention include computer-readable media having computer-executable instructions or data structures stored on computer-readable media. Such computer-readable media can be any available media that is accessible by a general purpose or special purpose computer system. By way of example, and not limitation, such computer-readable media can comprise RAM, ROM, EPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or in the form of computer- But is not limited to, a physical storage medium such as any other medium that can be used to store or communicate certain program code means of the general purpose or special purpose computer system, .

FIG. 1 is a block diagram illustrating a schematic structure of an object Internet service system according to the present invention.

1, the object Internet service system according to the present invention includes a matter Internet device 100 connected to and interworked with a communication network 10, a user terminal device 200, a wireless access device 300, Object Internet service server 400 as shown in FIG.

At this time, the communication network 10 is not only an open network such as a closed network such as a LAN (Local Area Network), a WAN (Wide Area Network), and the Internet , A mobile communication network such as CDMA (Code Division Multiple Access), WCDMA (Wideband Code Division Multiple Access), GSM (Global System for Mobile Communications), and LTE (Long Term Evolution) It is a concept that collectively refers to next-generation networks and computing networks to be implemented.

The wireless access device 300 is a device for connecting wireless devices to the communication network 10 by using a short-range wireless communication technology. The short-range wireless communication technology may be Wi-Fi, Zigbee, Bluetooth, And NFC (Near Field Communication) communication technology. The wireless access device 300 searches for wireless devices existing in the communication coverage according to the local wireless communication standard, establishes connection with the discovered wireless devices, and then relays transmission / reception data of the wireless device. In particular, in one embodiment of the present invention, the wireless access device 300 may support the Wi-Fi communication technology proposed in IEEE 802.11. For reference, the Wi-Fi based wireless communication can be performed after connection establishment through search, authentication, and combination.

In the present invention, the wireless access device 300 is installed in an area in which the object Internet device 100 is installed, so that the connection settings and data of the object Internet device 100 and the user terminal device 200 existing in the communication coverage, Transmission and reception are performed.

The function of each component of the Internet service system according to the present invention based on such an environment will be described below.

The object Internet apparatus 100 is a device that has a built-in sensor function and a communication function and is connected to the network 10 to transmit and receive data, and can be implemented in various embedded systems such as household appliances, mobile equipment, and wearable computers . The object Internet device 100 accesses the object Internet service server 400 through the communication network 10 and transmits data such as status information or sensing information to the object Internet service server 400, And performs a predetermined function according to a control command from the server 400. [ In particular, in the present invention, the object Internet device 100 connects to the wireless access device 300 performing short-range wireless communication to perform connection setting, and then transmits the information to the communication network 10 and / And accesses the object Internet service server 400.

The user terminal 200 is a device having a communication function and an information processing function that can be carried by a user, and includes a browser for transmitting and receiving information, a memory for storing a program and a protocol, A microprocessor, and the like. For example, the user terminal 200 may be a tablet PC, a laptop, a personal computer (PC), a smart phone, a personal digital assistant (PDA) , A smart TV, a mobile communication terminal, and the like. In particular, the user terminal 200 according to the present invention includes any one of a local communication function capable of communicating with the wireless access device 300, for example, a Wi-Fi, a Zigbee, and a Bluetooth communication function.

The user terminal 200 includes a computer program for executing the object Internet device control method according to the present invention and executes the computer program to control the object Internet device according to the present invention and a user interface .

Herein, the computer program embodying the method for controlling object Internet apparatus according to the present invention may be a program, software, application, script or code, and may be a language compiled or interpreted through a processor, , And may be deployed in any form including standalone programs or modules, components, subroutines, or other units suitable for use in a computer environment. A computer program does not necessarily correspond to a file in the file system. The program may be stored in a single file provided to the requested program, or in multiple interactive files (e.g., a file storing one or more modules, subprograms, or portions of code) (E.g., one or more scripts stored in a markup language document). A computer program may be deployed to run on multiple computers or on one computer, located on one site or distributed across multiple sites and interconnected by a communications network

More specifically, the user terminal device 200 connects the wireless Internet access device 300 to the wireless Internet access device 300 via the wireless connection device 300, Broadcasts it to devices in the vicinity of the device 300, in particular, the surrounding Internet device 100, and receives registration-related information for device registration transmitted based on the access information from the Internet device 100 And registers and authenticates the object Internet appliance 100 in cooperation with the object internet service server 400 on behalf of the object internet appliance 100 through the registration related information. Then, the authentication result information provided from the object Internet service server 400 is received through the registration and authentication process, and the authentication result information is provided to the object Internet device 100. At this time, the user terminal 200 may provide connection information to the object Internet service server 400 together.

The object Internet device 100 accesses the object Internet service server 400 based on the authentication result information obtained through the user terminal 200 and the connection information of the object Internet service server 400, . ≪ / RTI >

Since the communication between the object Internet device 100 and the user terminal device 200 is performed through the wireless access device 300, the object Internet device 100, which is located in the communication coverage of the wireless access device 300, And the user terminal device 200 can be performed only. That is, the user terminal device 200 for performing the registration and authentication of the object Internet device 100 is limited to the user terminal device 200 located in the communication coverage of the wireless access device 300 to which the object Internet device 100 is connectable A location-based trust relationship can be established between the object Internet device 100, which is the controlled object, and the user terminal device 200, which performs the control.

In addition, during the registration and authentication of the object Internet device 100, the user terminal device 200 may share registration related information and authentication result information of the object Internet device 100 with the object Internet device 100 It is possible to inquire and control data of the object Internet device 100 by accessing the object Internet service server 400 from a remote place.

The object Internet service server 400 is a platform device for providing a object Internet based service, which performs registration and authentication of the object Internet device 100, collects and manages data of the object Internet device 100, And controls the Internet device 100. [0031]

Specifically, in the present invention, the object Internet service server 400 registers registration-related information of the object Internet device 100 transmitted from the user terminal 200, and authenticates the object Internet device 100 And transmits the authentication result information derived as a result to the user terminal device 200. [ When the object Internet service server 400 transmits data from the object internet appliance 100, the object internet service server 400 checks the object internet appliance 100 based on the authentication result information and stores the same. When the object Internet service server 400 receives a command transmission request for requesting and controlling data for the specific object Internet appliance 100 from the user terminal device 200, (100), and then performs the request.

Hereinafter, the detailed configuration of each component of the Internet service system will be described.

FIG. 2 is a block diagram illustrating a schematic configuration of an Internet appliance according to an embodiment of the present invention. To perform the above-described process, the Internet appliance 100 includes a storage module 110, a control module 120, and a short-range wireless communication module 130.

The storage module 110 is a means for storing programs and data necessary for operation of the object Internet device 100. [ Particularly, in the present invention, the storage module 110 may store data such as sensing information and status information collected at predetermined intervals by the object Internet device 100. [ In addition, the storage module 110 may further store a service program in which an operation to be performed by the object Internet device 100 is defined. The service program is executed by the control module 120 when the object Internet appliance 100 is powered on, and performs processing such as collection and transmission of a specified task, for example, sensing information and status information. The storage module 110 may be connected to a specific wireless connection device 300 to restrict the location of the wireless Internet access device 300 connected to the Internet device 100, 300, more specifically, the device-specific information. The device specific information may be, for example, a serial number or a MAC address of the wireless access point 300. [ In addition, the storage module 110 may further store encryption key information, a security algorithm, and the like for security processing.

The control module 120 executes a computer executable program designed to implement the features of the present invention, including a processor, as means for controlling the object Internet appliance 100, And can collect and transmit sensing information / status information through interlocking with the registration and object Internet service server 400 through interworking with the terminal device 200, and execute remote control commands.

The short-range wireless communication module 130 is configured to transmit and receive data through the wireless connection device 300 by being connected to the wireless connection device 300 located near by the short-range wireless communication method. For example, And can transmit and receive data to and from the wireless access device 300 after being connected to the wireless access device 300 through a search, authentication, and association process according to a short-range wireless communication standard such as Wi-Fi, Zigbee and Bluetooth.

The object Internet apparatus 100 configured as described above is configured to perform a set service function after the network connection and device registration through the interlocking of the storage module 110, the control module 120, and the local area wireless communication module 130, And performs an interworking operation with the object Internet service server (400).

Specifically, the object Internet device 100 installed in a predetermined space, more specifically, the communication coverage of the specific wireless access point 300, firstly communicates with the wireless access point 300 capable of communicating via the shortwire wireless communication module 130, .

At this time, based on the manual search method, the object Internet device 100 waits for the reception of the wireless signal transmitted from the nearby wireless access device 300, 300). For example, in the present invention, it is possible to receive connection information broadcasted from the wireless access device 300 in response to a request from the user terminal device 200. [

Then, the object Internet device 100 performs connection setup with the wireless access device 300 found through the above-described process. At this time, the object Internet device 100 can be connected to the wireless access device 300 through a search, authentication and association process according to a short-range wireless communication standard such as Wi-Fi, Zigbee, and Bluetooth.

At this time, the control module 120 of the Internet device 100 transmits the device-specific information of the wireless access device 300 included in the connection information previously received from the wireless access device 300, The stored information can be compared to confirm that the wireless access device 300 is the wireless access device 300 to which the wireless access device 300 is connected.

The control module 120 of the object Internet appliance 100 may be configured to determine whether to connect to the wireless access device 300 through the wireless access device 300 based on the received access information, (100). At this time, the control module 120 can transmit the registration related information after authenticating that the user terminal 200 is a legitimate device by using the authentication value included in the connection information. At this time, The authentication server 100 may further transmit an authentication value for authentication of the object Internet device 100. [ In particular, the control module 120 may encrypt the registration-related information by using an encryption key included in the access information and transmit the encryption-related information. The encryption key is information that is shared with the user terminal device 200, through which the user terminal device 200 and the object Internet device 100 can encrypt and decrypt data exchanged with each other.

The access information includes a cryptographic key to be used for communication between the object Internet device 100 and the user terminal device 200 and a cipher key to be used for the connection between the object Internet device 100 and the user terminal device 200, Specific information of the user terminal device 300, and identification information of the user terminal device 200.

In addition, the registration-related information may include the device registration information and the IP address allocated through the connection process from the wireless access device 300. When the object Internet device 100 is registered, And the authentication result information provided by the authentication unit 400, and may further include device-specific information such as a serial number, a MAC address, MIN, and the like, when the device is not a registered device.

The object Internet device 100 transmits the registration related information when it is not yet registered and then transmits the authentication result information provided from the object Internet service server 400 and the object Internet service server 400, and store the connection information.

At this time, communication between the Internet 200 and the Internet 200 is performed through a short-range wireless communication channel supported by the wireless access point 300.

After the device registration is completed and the authentication result information is received, the control module 120 performs a predetermined function according to a predetermined service program, and transmits the collected data to the object Internet service server 400 And can also execute a remote control command transmitted from the object Internet service server 400. [

Next, FIG. 3 is a block diagram showing a schematic configuration of a user terminal device 200 according to the present invention.

3, a user terminal 200 according to the present invention includes a communication unit 210, an input unit 220, an output unit 230, a storage unit 240, and a control unit 250 .

The communication unit 210 is a means for receiving data from an external source and transmitting data to an external source, such as a network interface card and a corresponding Network Driver Interface Specification ("NDIS") stack May be represented by a logical combination of one or more software and / or hardware modules. The communication unit 210 may support various communication protocols. For example, it can support various mobile communication standards such as AMPS, CDMA, GSM, W-CDMA, HSDPA, LTE and LTE-A and can also support short-range wireless network technologies such as BLE and Zigbee. Particularly, in the present invention, the communication unit 210 is connected to the communication network 10 according to the mobile communication standard, and connects to the wireless connection device 300 according to a mobile communication module and a local wireless communication standard for data transmission and reception, And a short range communication module for transmitting and receiving.

The input unit 220 is configured to receive commands and information from a user and generates a predetermined user input signal according to a user's operation and transmits the generated user input signal to the controller 250. The input unit 130 may be implemented by a variety of input means that are currently commercialized or may be commercialized in the future. For example, the input unit 130 may include a general input device such as a keyboard, a mouse, a joystick, a touch screen, Gesture input means for sensing and generating a specific input signal, and voice recognition means for recognizing the user's voice. In addition, the input unit 220 may be connected to the controller 250 through a system buffer and an input / output interface. Here, the input / output interface may include a wide variety of input / output interfaces, such as, for example, a serial port interface, a PS / 2 interface, a parallel port interface, a USB interface, IEEE (Institute of Electrical and Electronics Engineers) Any of the different interfaces can be represented logically, or even combinations of different interfaces can be logically represented.

The output unit 230 is provided to allow the user to recognize the operation result or status of the user terminal device 200. In particular, the output unit 230 can visually output information using the display means. For example, the output unit 230 may be an organic light emitting diode (OLED), a vacuum fluorescent display (VFD), a liquid crystal display (LCD), a light emitting diode display, a plasma display panel (OLED), or the like, as well as a three-dimensional display means such as a holography or a laser beam. The output unit 230 may be connected to the control unit 250 through a video interface such as a high definition multimedia interface (HDMI) or a graphics device interface (GDI) Lt; / RTI >

The storage unit 240 is a structure for storing data or a program to be executed or processed by the control unit 250. Basically, the storage unit 340 may include an OS (operating system) for operating each of the above-described configurations of the user terminal 200, various user functions such as a call of the user terminal 200 A user function for supporting functions, an MP3 user function for playing other sound sources, an image output function for playing back images such as photographs, and an application program for supporting a moving image playback function, respectively. In particular, in the present invention, the storage unit 240 is a computer program implemented to perform control of the Internet appliance according to the present invention, and may store the Internet service application.

The storage unit 240 may be an optical storage medium such as a magnetic medium such as a hard disk, a floppy disk, and a magnetic tape, a compact disk read only memory (CD-ROM), and a digital video disk (DVD) A magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), and a flash memory.

The control unit 240 is configured to perform overall control of the user terminal device 200, and may be implemented with one or more processors. The processor may be a single-threaded processor, and in other embodiments, the processor may be a multithreaded processor. Further, the control unit 240 can operate by processing the instructions stored in the storage unit 240 via the one or more processors. The instructions may include interpreted instructions or executable code such as, for example, JavaScript or ECMAScript commands, or other instructions stored in a computer-readable medium.

In particular, in the present invention, the control unit 240 may execute commands according to the object Internet service application to control the object Internet equipment according to the present invention.

The control unit 240 receives a user input signal for control of the object Internet device through the input unit 220 and transmits the input signal to the surrounding wireless access device (300) to request broadcast of the access information. For this, the control unit 240 may perform at least one of a connection process of searching, authenticating, and combining the wireless access point 300 through the communication unit 210. For example, after the controller 240 searches for a neighboring wireless access point 300, the control unit 240 transmits the device unique information of the discovered wireless access point 300 and the device- The access information including the cipher key generated by the access point 300 may be transmitted to the wireless access device 300 to request broadcasting. At this time, broadcasting of the access information may be performed according to the communication standard supported by the wireless access device 300 Follow. For example, the controller 240 transmits the connection information without specifying the destination address of the data packet to be transmitted, and the wireless access device 300 broadcasts the data packet including the connection information to the surrounding coverage Casting.

Then, when the registration-related information is received from the object-oriented Internet device 100 receiving the connection information based on the connection information, the control unit 240 stores the received registration-related information in the storage unit 240. At this time, the registration-related information is encrypted by the encryption key included in the access information, and the control unit 240 can decrypt the registration-related information. In the case of an unregistered device, the control unit 240 transmits the registration-related information to the object Internet service server 400, requests registration and authentication, and then transmits the registration related information to the object Internet service server 400 Upon receiving the authentication result information, the authentication result information is stored in the storage unit 240 and transmitted to the matter Internet device 100 through the wireless access device 300.

In addition, the controller 250 provides the user with a GUI for inquiring and controlling data on the registered Internet device 100, and transmits the GUI to the Internet service server 400 according to a user input signal Request data inquiry, or request command transmission. At this time, the control unit 250 may transmit the authentication result information of the previously stored object Internet device 100 together with the object Internet service server 400 to check the data or the authority to transmit the command.

Lastly, FIG. 4 is a block diagram illustrating the configuration of the Internet service server according to the present invention.

4, the object Internet service server 400 may include a communication module 410, a control module 420, an authentication module 430, and a storage module 440.

The communication module 410 is a structure for transmitting and receiving data through the communication network 10, and the communication module 410 can transmit and receive data through various communication methods as well as the wired and wireless methods. The communication module 410 establishes a communication session with the object Internet apparatus 100 or the user terminal apparatus 200 through the communication network 10 and communicates with the object Internet apparatus 100 or the user terminal apparatus 200 And data can be transmitted and received.

The control module 420 is a unit for controlling the entirety of the object Internet service. The control module 420 registers a plurality of the object internet devices 100 according to the service algorithm and manages and processes the data transmitted from the registered object internet devices 100 And may also search for and provide data from the user terminal 200 in response to a request, or transmit the received command to the corresponding object Internet appliance 100.

The authentication module 430 is a configuration for performing authorization and authentication of the object Internet device 100 and the user terminal device 200 during the above process. Specifically, when the device of the object Internet device 100 registers the device in the control module 420, the object Internet device 100 authenticates the legitimate device, and generates the authentication result information accordingly. When the object Internet device 100 and the user terminal device 200 are accessed, authentication result information is received from the object Internet device 100 and the user terminal device 200, The access right of the object Internet device 100 and the user terminal device 200 can be confirmed.

The control module 420 processes the request or data transmitted from the object Internet device 100 and the user terminal device 200 according to the authority identified by the authentication module 430.

The operation according to the control module 420 may be performed as described above with reference to FIGS.

The storage module 440 is a configuration for storing data and programs necessary for providing the object Internet service. Specifically, the storage module 440 stores the authentication result information for each of the object internet devices 100 registered with the device, the data transmitted from each of the object internet devices 100, the command for each of the object internet devices 100, .

The storage module 440 may be an optical recording medium such as a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, a CD-ROM (Compact Disc Read Only Memory), a DVD (Digital Video Disk) A magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), and a flash memory.

In particular, the storage module 440 stores a program module for executing an operation of the object Internet service server 400 according to the flowcharts of FIGS. 5 to 7 to be described below, and transmits the program module to the control module 420 ) To be executed, thereby performing the control operation of the object Internet appliance according to the present invention.

The process of controlling the Internet appliance in the Internet of the objects according to the present invention, which is performed through the Internet of the Internet 100, the user terminal 200 and the Internet 400, 7 to FIG. 7. FIG.

5, a process of registering and authenticating the object Internet device 100 to the object Internet service server 400 according to the present invention will be described.

As described above, the object Internet device 100 is a device that has a built-in sensor function and a communication function and is connected to the communication network 10 to transmit and receive data. After the object Internet device 100 is installed in a predetermined space, (400).

In the present invention, the user or administrator of the Internet device 100 can process the network configuration and the registration process of the Internet device 100 through the user terminal 200 carried by the Internet device 100.

To this end, the user terminal device 200 is provided with a computer program for controlling the object Internet device 100 according to the present invention in advance, and executes the computer program to control the object Internet device control Method can be performed.

First, the user terminal 200 accesses a wireless access device 300 installed in the same space as the object Internet device 100 to be controlled, and transmits the information to the object Internet device 100 through the wireless access device 300 And broadcast connection information for network connection (S101, S102).

At this time, the communication between the user terminal 200 and the wireless access device 300 may be performed according to a short-range wireless communication standard such as Wi-Fi, Zigbee, and Bluetooth. That is, the user terminal device 200 can transmit the access information for the network configuration of the object Internet device 100 to the wireless access device 300 through a function supported by the known short-range wireless communication method.

Specifically, for example, according to the Wi-Fi communication process defined in IEEE 802.11, data is transmitted and received after establishing a connection with the wireless access device 300. At this time, (discovery), authentication, and association. Here, the search is a step of searching for a wireless access device 300 to which the user terminal device 200 can connect, exchanging information for communication with the wireless access device 300, and includes a manual search method and an active search method It can be done in any one of the ways.

The manual search method is a method in which the wireless access device 300 periodically broadcasts a beacon message and receives the beacon message at the user terminal 200 to search for the wireless access device 300 . Here, the beacon message includes information (hereinafter, referred to as beacon information) necessary for the user terminal 200 to distinguish and connect to the wireless access point 300, and includes, for example, identification information of the wireless access point 300 , Channel information, security type, and so on.

On the other hand, the active search is a method in which the user terminal device 200 inquires of which wireless access point device 300 is located, so that the user terminal device 200 transmits a probe request Upon broadcasting, the wireless access device 300 that has received the probe response transmits a probe response, and the user terminal device 200 that has confirmed the wireless access device 300 through the probe response performs the authentication and association process . This active search can be divided into a unicast probe method and a broadcast probe method according to whether the wireless access device 300 transmits a probe response in unicast or broadcast.

In step S101, the present invention may transmit the access information after establishing a connection with the wireless access device 300 through the above-described search method, in particular, manual search. In addition, the user terminal 200 does not designate a destination address of a data packet including the access information, thereby allowing the wireless access device 300 to broadcast a data packet including the access information .

 In addition, the user terminal 200 may transmit the access information through a broadcasting request message supported by the corresponding short-range wireless communication technology. ), The access information may be transmitted in various manners.

The connection information that the user terminal device 200 transmits to the object Internet device 100 is information necessary for the object Internet device 100 to securely register and authenticate through the user terminal device 200 Specifically, a cryptographic key to be used for communication between the object Internet device 100 and the user terminal device 200. The cryptographic key may be used not only to encrypt and decrypt data transmitted between the object Internet device 100 and the user terminal 200 but also between the object Internet device 100 and the object Internet service server 400 have.

In addition, the connection information may further include identification information of the object Internet device 100 and the wireless access device 300 to which the user terminal device 200 is connected. The identification information of the wireless access device 300 may be a BSSID (Basic Service Set ID) assigned to the wireless access device 300, for example. The BSSID is a physical address given to the wireless access device 300, and may be a MAC address.

That is, the user terminal device 200 and the object Internet appliance 100 can designate the wireless access device 300 connected for network configuration. In this case, it is possible to restrict the location where registration of the object Internet appliance 100 is performed by the specified wireless access device 300, that is, the communication coverage of the wireless access device 300, And the user terminal device 200 can establish a location-based trust relationship. At this time, among the access information, the encryption key may be generated based on the identification information of the specific wireless access device 300. For example, the identification information of the wireless access device 300 may include a serial number assigned to the device by the manufacturer of the wireless access device 300 and a MAC address assigned to the wireless access device 300.

In addition, the connection information may include address information of the user terminal 200. [ The address information of the user terminal 200 may be an IP address assigned to the user terminal 200 and may be described as sender address information in the header of the message.

When the connection information provided by the user terminal device 200 is broadcasted through the radio access device 300, the thing Internet device 100 located in the communication coverage of the radio access device 300 receives the connection information can do.

For example, the connection information may be broadcast with a beacon signal, and the object Internet device 100 receiving the connection information may transmit the beacon signal to the corresponding wireless device 300 without a separate search procedure. The connection device 300 can be searched, and then the connection setting with the wireless access device 300 is performed (S103). The connection setting can be made according to the procedure specified in the communication method of the wireless access device 300.

The object Internet device 100 connected to the specific wireless access device 300 transmits registration related information for device registration to the object Internet service server 400 to the wireless Internet access server 400 based on the access information received in step S102 To the user terminal device 200 through the device 300 (S104). That is, the object Internet device 100 transmits the registration-related information to the sender address, that is, the user terminal 200, which provided the received connection information. At this time, the registration- Can be encrypted with an encryption key.

Although not shown in FIG. 5, during the execution of steps S101 to S104, the user terminal device 200 and the object Internet device 100 perform authentication on the partner device, In addition to the relationship, additional authentication procedures can be further performed to establish a more stable trust relationship.

For example, the user terminal device 200 generates and transmits a first authentication value through a predetermined algorithm based on unique identification information of the object Internet device 100, in particular, serial information, The Internet appliance 100 can verify whether the user terminal 200 is a legitimate device by verifying the first authentication value through a predetermined algorithm, Value and the unique identification information of the user terminal device 200, the user terminal device 200 verifies the second authentication value through a predetermined algorithm, It is possible to confirm whether the device 100 is a legitimate device. Such a mutual authentication procedure can be performed based on various known authentication algorithms.

In addition, the registration-related information includes an IP address of the object Internet device 100 allocated through the wireless access device 300, a device registration status, an authentication result received from the object Internet service server 400 Information (ID, certificate, etc.), device unique identification information (serial number, IP address, MAC address, MIN, etc.).

Thereafter, the object Internet device 100 drives a predetermined service program to perform a predetermined service. The service program may be a daemon program that performs a background operation without user's direct control.

On the other hand, the user terminal 200 receiving the registration-related information from the object Internet device 100 stores the received registration-related information, and may map and store the remaining information in the device-specific information (S105 ).

Thereafter, the user terminal device 200 performs a device registration procedure on behalf of the object Internet device 100.

At this time, the user terminal device 200 confirms whether or not the registration related information is received, and if the device is already registered in the object Internet service server 400, among the received registration related information, (ID, certificate, etc.), and then do not need to perform the device registration procedure (steps S106 to S113) described below.

On the other hand, if the object Internet device 100 is not a registered device, the user terminal device 200 accesses the object Internet service server 400 to request the device registration of the object Internet device 100 (S106 ). At this time, the user terminal device 200 may transmit the registration-related information received from the object Internet device 100 together to request the device Internet device 100 to register the device. At this time, the registration-related information transmitted together for device registration becomes the device-specific information (serial number, IP address, MAC address, MIN, etc.).

The object Internet service server 400 receiving the device registration request stores the received registration related information and transmits the registration result to the user terminal 200 through the response message (S107). At this time, the object Internet service server 400 may map and store identification information (for example, MIN, serial number, IP address, etc.) of the user terminal 200 and the registration related information.

In addition, the user terminal 100 requests the object Internet service server 400 to authenticate the object Internet device 100 requested to register the device (S108), and the object Internet service server 400 transmits (S109), and transmits the authentication result information to the user terminal device 200 (S110). Here, the predetermined authentication procedure may be configured to check whether the object Internet device 100 is a legitimate device. For example, the predetermined authentication procedure may be one of device unique information of a legitimate object Internet device (specifically, The device specific information included in the received registration related information and the device specific information of the stored legitimate Internet device are compared with each other, can do.

In addition, the object Internet service server 400 may generate information (ID, certificate, etc.) for authenticating the object Internet device 100 as authentication result information.

In addition, the user terminal 200 receiving the authentication result information from the Internet service server 400 transmits the received authentication result to the Internet 200 through the wireless access device 300 (S110) . At this time, the user terminal 200 may further provide connection information (for example, an IP address or a URL) to the object Internet service server 400 when transmitting the authentication result information.

The authentication result information may also be securely transmitted by being decrypted in the object Internet device 100 after being encrypted with the previously shared cipher key.

At this time, the user terminal device 200 maps and stores the received authentication result information with the registration related information stored in advance, and performs data inquiry and control on the object Internet device 100 using the stored authentication result information Can be performed.

The object Internet appliance 100 receiving the authentication result information and the connection information for the object Internet service server 400 from the user terminal device 200 stores the information and the connection information for the object Internet service server 400 in step S112, (S113).

Through the above-described process, the object Internet device 100 and the user terminal device 200 establish a trust relationship based on the location, and can share authentication result information.

In particular, the process described above can be performed on the assumption that the object Internet device 100 and the user terminal device 200 exist in the communication coverage of the same wireless access device 300, The location of the user terminal device 200 is limited so that access to the object Internet device 100 outside the communication coverage is disabled, thereby preventing unauthorized access.

For reference, access to the Internet service server 400 of the user terminal 200 in steps S106 to S110 may be performed through the wireless access device 300, Access via a wireless connection device other than the device 300 or another communication method is also possible.

Next, with reference to FIG. 6, a process of inquiring and controlling data of the object Internet device 100 registered and authenticated through the user terminal device 200 will be described.

Referring to FIG. 6, the object Internet device 100, which has performed the network connection and device registration / authentication process through the user terminal device 200, operates according to a predetermined service daemon, For example, a sensing operation).

The data related to the set function is periodically or non-periodically transmitted to the object Internet service server 400 (S201). At this time, the transmission of the data may be performed based on the authentication result information and access information received in step S111 of FIG. More specifically, the object Internet device 100 generates a data packet having destination information as connection destination information of the object Internet service server 400 received from the user terminal device 200, and transmits the generated data packet to a connected wireless And transmits it through the access device 300. The data packet is transmitted to the communication network 10 through the wireless access device 300 and may be transmitted to the destination Internet service server 400 through the forwarding of the communication network 10. At this time, the object Internet device 100 may transmit the certificate included in the authentication result information together.

The object Internet device 100 may further perform a procedure for connecting a separate communication session with the object Internet service server 400 (in particular, a security session such as a VPN) for the above-described data transmission.

At this time, the object Internet service server 400 stores the received data (S202). At this time, the object Internet service server 400 maps and stores the unique device information of the object Internet device 100, have. Here, the transmitted data may include, for example, sensing information and state information collected from the object Internet device 100. [

The object Internet service server 400 may transmit the data transmission result (for example, reception status) to the object Internet device 100 to inform that the data has arrived stably (S203).

The above-described data transfer is performed directly between the object Internet device 100 and the object Internet service server 400 without the intervention of the user terminal device 200.

The object Internet service server 400 may provide the user with the data related to the object Internet apparatus 100 thus received through the user terminal apparatus 200.

That is, the user terminal device 200 transmits the object Internet device (400) to the object Internet service server (400) using the authentication result information shared with the object internet device (100) 100) (S204). At this time, the position of the user terminal 200 is not limited. That is, if the user terminal device 200 can access the communication network 10, the user terminal device 200 can access the object Internet service server 400 at any place.

The object Internet service server 400 receives the authentication result information from the user terminal 200 and checks the authority of the user terminal 200 in step S205. To the user terminal device 200 (S206).

In addition, the object Internet service server 400 may support remote control of the user terminal 200 with respect to the object Internet apparatus 100.

That is, the user terminal device 200 transmits the object Internet device (400) to the object Internet service server (400) using the authentication result information shared with the object internet device (100) 100) (S207). Similarly, the location of the user terminal 200 is not limited. That is, if the user terminal device 200 can access the communication network 10, the user terminal device 200 can access the object Internet service server 400 at any place.

The object Internet service server 400 receives the authentication result information from the user terminal 200 and verifies the authority of the user terminal 200 based on the authentication result information provided from the user terminal 200 in operation S208, 200 to the corresponding object Internet appliance 100 (S211). The command is transmitted to the wireless access device 300 through the communication network 10 and then to the wireless Internet access device 300 through the wireless access device 300.

The object Internet device 100 performs the received command (S212), and transmits the command execution result to the object Internet service server 400 (S213).

The object Internet service server 400 stores the received command execution result (S214). If there is an inquiry request from the user terminal 200 (S215), the object Internet service server 400 confirms the authority as described above (S216) The terminal device 200 can provide a command execution result (S217).

In addition, in the present invention, the object Internet device 100 shares the acquired authentication result information with other object Internet devices 100 in a location-based trust relationship, Can be interworked with. This will be described with reference to FIG.

In FIG. 7, the first-party Internet appliance 101 and the second-party internet appliance 102 should be located within the same communication coverage, that is, the communication coverage of the wireless access device 300.

In addition, the first and second Internet devices 101 and 102 are in a state of performing network connection and device registration / authentication through the wireless access device 300 through the procedure of FIG. 1, respectively, In addition, data is transmitted to the object Internet service server 400 through the procedure of FIG.

 If it is necessary to interwork with another device, the first thing Internet device 101 broadcasts the authentication result information received in step S111 through the connected wireless access device 300 (S301).

Accordingly, the second-party Internet device 102 located in the communication coverage of the wireless access device 300 may receive the authentication result information of the first-party Internet device 101. That is, the first and second Internet devices 101 and 102 can securely share the authentication result information through the location-based trust relationship.

Upon receiving the broadcast authentication result information, the second-party Internet device 102 may transmit a response to the first-party Internet device 101 through the wireless access device 300, indicating that the authentication result information has been received. At this time, the response may be transmitted only to the first-party Internet appliance 101 in a unicast manner.

On the other hand, the second-matter internet appliance 102 stores the received authentication result information of the first-thing Internet appliance 101 (S303), and transmits to the second Internet server 400 a first object And transmits a data inquiry request related to the Internet device 101 (S304).

The object Internet service server 400 confirms the authority for data inquiry based on the authentication result information and transmits data related to the first object internet appliance 101 to the second object internet appliance 102 (S305) .

The second-things internet appliance 102 can perform a predetermined operation according to the received data of the first-things internet appliance 101 (S306).

For example, assuming that the first-matter Internet appliance 101 is an air quality measuring device capable of measuring contamination information in the air, and the second-things Internet appliance 102 is an air purifier, The Internet device 102 may compare the data (e.g., air quality measurement value) of the first-party Internet appliance 101 with a predetermined threshold value, and may operate to purify the air if it is greater than or equal to the threshold value.

The control method of the object Internet apparatus of the present invention as described above may be provided in the form of a computer readable medium suitable for storing computer program instructions and data. The computer program recorded on the recording medium for implementing the control method of the object Internet apparatus according to an embodiment of the present invention can be implemented to execute at least a part of the steps shown in FIG. 2 to FIG. At this time, the program recorded on the recording medium can be read and installed in the computer and executed, thereby executing the above-described functions.

In order to allow a computer to read a program recorded on a recording medium and to execute functions implemented by the program, the above-mentioned program may be stored in a computer-readable medium such as C, C ++, JAVA, machine language, and the like.

The code may include a function code related to a function or the like that defines the functions described above and may include an execution procedure related control code necessary for the processor of the computer to execute the functions described above according to a predetermined procedure. In addition, such code may further include memory reference related code as to what additional information or media needed to cause the processor of the computer to execute the aforementioned functions should be referenced at any location (address) of the internal or external memory of the computer . In addition, when a processor of a computer needs to communicate with any other computer or server that is remote to execute the above-described functions, the code may be stored in a memory of the computer using a communication module of the computer, It may further include a communication-related code such as how to communicate with another computer or a server, and what information or media should be transmitted or received during communication.

Such computer-readable media suitable for storing computer program instructions and data include, for example, magnetic media such as hard disks, floppy disks and magnetic tape, compact disk read only memory (CD-ROM) Optical media such as a DVD (Digital Video Disk), a magneto-optical medium such as a floppy disk, and a ROM (Read Only Memory), a RAM , Random Access Memory), flash memory, EPROM (Erasable Programmable ROM), and EEPROM (Electrically Erasable Programmable ROM). The processor and memory may be supplemented by, or incorporated in, special purpose logic circuits.

The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. The functional program for implementing the present invention and the related code and code segment may be implemented by programmers in the technical field of the present invention in consideration of the system environment of the computer that reads the recording medium and executes the program, Or may be easily modified or modified by the user.

While the specification contains a number of specific implementation details, it should be understood that they are not to be construed as limitations on the scope of any invention or claim, but rather on the description of features that may be specific to a particular embodiment of a particular invention Should be understood. Certain features described herein in the context of separate embodiments may be implemented in combination in a single embodiment. Conversely, various features described in the context of a single embodiment may also be implemented in multiple embodiments, either individually or in any suitable subcombination. Further, although the features may operate in a particular combination and may be initially described as so claimed, one or more features from the claimed combination may in some cases be excluded from the combination, Or a variant of a subcombination.

Likewise, although the operations are depicted in the drawings in a particular order, it should be understood that such operations must be performed in that particular order or sequential order shown to achieve the desired result, or that all illustrated operations should be performed. In certain cases, multitasking and parallel processing may be advantageous. Also, the separation of the various system components of the above-described embodiments should not be understood as requiring such separation in all embodiments, and the described program components and systems will generally be integrated together into a single software product or packaged into multiple software products It should be understood.

The present invention can safely access various types of Internet devices through a user terminal carried by the user, thereby controlling the registration and authentication process of Internet devices and changing the dynamic parameters of the Internet devices.

In particular, the present invention can change the dynamic parameters of the object Internet device while performing the network setting process of the object internet device without changing the firmware of the object Internet device, Based trust relationship and establishes a trust relationship with the object Internet service server to share the authentication information required for interworking with the object Internet service server so that the user terminal device controls the object Internet appliance remotely and inquires the status or data of the object Internet appliance .

10: Network
100: Things Internet Devices
200: User terminal
300: wireless connection device
400: Object Internet Service Server

Claims (12)

A user terminal device,
Requesting the wireless access device to broadcast access information for communication between the object Internet device and the user terminal device to a peripheral device within the communication coverage;
Receiving registration-related information for device registration transmitted from the object Internet device that has received the broadcasted access information based on the access information through the wireless access device;
Requesting the object Internet service server to register and authenticate the object Internet appliance on behalf of the object internet appliance that has transmitted the registration related information;
Receiving registration result information and authentication result information from the object Internet service server;
And transmitting the received authentication result information and connection information of the object Internet service server to the object Internet device through the wireless connection device,
Wherein the object Internet device accesses the object Internet service server using the connection information of the object Internet service server and the authentication result information, and transmits and receives data to and from the object Internet service server. The method according to claim 1,
Storing the received registration related information and authentication result information in the user terminal;
Requesting the object Internet service server to inquire data related to the object Internet appliance using the stored authentication result information; And
Further comprising receiving data related to the Internet appliance from the Internet service server and outputting the data to the user. 3. The method of claim 2,
The user terminal device requesting the matter Internet service server to transmit a command to send the command to the matter Internet device using the authentication result information; And
Further comprising the step of receiving a command delivery request result from the object Internet appliance. The method of claim 3,
Requesting the object Internet service server to inquire about a command execution result using the authentication result information; And
And receiving a command execution result received from the object Internet service server from the object internet service server from the object internet service server. The method according to claim 1, wherein the access information for communication between the object Internet device and the user terminal device comprises:
Wherein the control unit includes at least one of device unique information of the wireless access device, a cryptographic key used for communication between the object internet device and the user terminal device, and an IP address of the user terminal device. Way. 6. The method of claim 5,
Wherein the control information is generated based on device-specific information of the wireless access device. The method of claim 6, wherein the device unique information of the wireless access device
Serial information, and a MAC address. The method as claimed in claim 1, The information processing apparatus according to claim 1,
The device information includes at least one of whether or not to register the device, the IP address of the destination Internet device allocated from the wireless access device, the authentication result information provided by the destination Internet service server, and the device unique information of the destination Internet device Wherein the method comprises the steps of: Objects Internet devices,
Receiving connection information of a user terminal device broadcasted from a wireless access device;
Performing a connection with the wireless access device;
Transmitting registration related information for device registration to the user terminal device based on the connection information through the connected wireless access device;
Receiving, from the user terminal, authentication result information received from the object Internet service server on behalf of the object Internet device and connection information of the object Internet service server; And
And connecting to the object Internet service server based on the authentication result information and interworking with the object Internet server. A computer-readable recording medium having recorded thereon a computer program for executing a method for controlling a thing Internet appliance using the user terminal according to any one of claims 1 to 9. A computer program which is embodied to execute a method for controlling an Internet appliance using a user terminal according to any one of claims 1 to 9, the computer program being stored in a computer-readable recording medium. A communication unit for supporting at least one communication method including a short-range wireless communication method to transmit and receive data through the at least one communication method;
Requesting the wireless access device capable of communicating through the short-range wireless communication method to broadcast connection information for communication with the object Internet device, and then receiving registration-related information for device registration from the object Internet device that has received the access information And transmits the registration related information to the object Internet service server to request registration and authentication, and upon receiving the authentication result information from the object internet service server corresponding to the registration result information, A control unit for controlling transmission to the object Internet device;
And a storage unit for storing at least one of connection information for communication with the object Internet equipment, registration related information of the object internet equipment, and authentication result information.

Images