KR101934785B1 - Entrance control system - Google Patents

Abstract

The present invention provides an access control system including an administrator terminal, a user terminal, and an entrance control device, wherein when the first phone information of a user who is allowed to enter and leave is registered, the administrator terminal encrypts the first phone information, Activates an administrator application that transmits the application activation authentication information to the entrance control unit, and the user terminal activates a user application stored in the user terminal when the application activation authentication information is input, The access control unit encrypts the application activation authentication information again to generate door release information, and transmits the generated door release information and second phone information corresponding to the user terminal to the entrance control unit The access control unit compares the first phone information obtained by decrypting the application activation authentication information received from the administrator terminal and the second phone information received from the user terminal, The door lock can be released.

Description

{ENTRANCE CONTROL SYSTEM}

The present invention relates to a system capable of controlling access by a user using a mobile terminal of a manager without having to provide a separate server for managing access by a user.

Generally, the access control terminal is used to control the entrance and exit of a user, and unlocks the door by identification of the user such as a fingerprint or an ID card. Therefore, when a visitor who does not have the access right of the access control terminal wants to access, he or she should call the manager with a bell or interphone and get approval from the manager.

In other words, the visitor has to set in advance the time and place to contact the person in charge for permission to enter. Therefore, the manager who welcomes the visitor has the inconvenience that he or she should wait at the appointed place according to the visiting time.

In addition, existing access control technology has a separate server to control access. A separate server is to perform functions such as authentication and access control of access terminals. However, there is a problem in that it is difficult to provide a separate server in a place where small-sized accesses are managed, in terms of cost, securing the installation place, and maintenance.

The present invention can provide an access control system that can encrypt and transmit authentication information and the like without having a separate server for access management to improve security.

Other objects and advantages of the present invention will become apparent from the following description, and it will be understood by those skilled in the art that the present invention is not limited thereto. It will also be readily apparent that the objects and advantages of the invention may be realized and attained by means of the instrumentalities and combinations particularly pointed out in the appended claims.

According to an aspect of the present invention, there is provided an access control system including an administrator terminal, a user terminal, and an access control device, wherein when the first phone information of a passenger to allow access is registered, And activates an administrator application for encrypting the one-phone information to generate application activation authentication information and transmit the application activation authentication information to the entrance control device, and the user terminal stores the application activation authentication information stored in the user terminal Activating a user application and, when the user terminal is connected to the entrance control unit, encrypting the application activation authentication information again to generate door release information, and generating the door release information and the second phone corresponding to the user terminalThe access control device activates a user application for transmitting the information to the access control device, and the access control device includes: first phone information obtained by decrypting the application activation authentication information received from the administrator terminal; The information can be compared and, when matched, the door lock can be released.

The access control unit determines whether the application activation authentication information obtained by decrypting the door release information received from the user terminal and the application activation authentication information received from the administrator terminal are matched with each other, And if it is matched, the corresponding door lock can be released.

The access control unit decrypts the application activation information obtained by decrypting the door release information received from the user terminal and decrypts the first phone information and the application activation authentication information received from the administrator terminal, It is determined whether the first phone information is matched, whether the door release information is the hacked information, and if the door release information is matched, the door lock can be released.

The user terminal generates the door release information by encrypting the connection time information of the user terminal and the controller and the authentication information, and the access controller decrypts the door release information received from the user terminal to obtain access time information And determines whether or not the time difference between the acquired connection time information and the current time information recognized by the entrance control unit is within a predetermined time to check whether the door release information is the hacked information, Can be released.

The administrator terminal generates the application activation authentication information by encrypting the first phone information using the first key, and the access controller transmits the application activation authentication information received from the administrator terminal to the first terminal using the first key And decode it.

The user terminal generates the door release information by encrypting the application activation authentication information once more by using the second key, and the access controller transmits the door release information received from the user terminal to the second key To obtain the application activation authentication information, and obtain the first phone information by decrypting the decrypted application activation authentication information again using a first key.

The access controller can generate the access statistics information of the user based on the information obtained while releasing the door lock.

The manager terminal, the user terminal, and the access controller include a short-range communication module, and can transmit and receive information through the short-range communication module.

According to the present invention, access management is performed by using an administrator terminal, so that it is not necessary to provide a separate server for access management, so that not only management cost and labor cost for server construction and maintenance can be reduced, Access control can be conveniently set / changed in real time.

Further, according to the present invention, by encrypting and transmitting authentication information or the like, it is possible to minimize damage caused by leakage of authentication information, thereby improving security.

In addition, according to the present invention, it is possible to prevent the door lock from being released due to hacking by determining whether or not the door release information received from the user terminal is hacked, and then releasing the door lock according to the determination result.

1 is a view for explaining an access control system according to an embodiment of the present invention.
FIGS. 2 and 3 are diagrams for explaining a method for transmitting and receiving information using a local area communication method according to an embodiment of the present invention.
4 is a diagram for explaining a method of activating a user registration and a user application.
FIGS. 5, 6, and 7 are diagrams for explaining a method for authenticating access to / from a user terminal.
8 is a diagram for explaining an administrator application according to an embodiment of the present invention.
FIG. 9 is a flowchart illustrating an access control method according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. The embodiments of the present invention can be modified in various forms, and the scope of the present invention should not be construed as being limited to the embodiments described below. The embodiments are provided to explain the present invention to a person having ordinary skill in the art to which the present invention belongs.

1 is a view for explaining an access control system according to an embodiment of the present invention.

Referring to FIG. 1, the access control system 100 includes an administrator terminal 110, user terminals 120, 121 and 122, and an access control unit 130.

The terminal may be various types of devices capable of performing communication functions such as a mobile phone, a smart phone, a notebook computer, a digital broadcast terminal, a PDA (Personal Digital Assistants), a PMP (Portable Multimedia Player) .

When the first phone information of the passenger who is permitted to enter and exit is registered, the administrator terminal 110 can generate the application activation authentication information by encrypting the first phone information. The administrator can further register information (e.g., department name, rank, name, etc.) of the user of the user terminal in addition to the first phone information. For example, the administrator can select one of the accessing information stored in the accessing database stored in the memory of the administrator terminal 110, register the accessing information arranged in Excel or the like, or register the accessing information individually. The application activation authentication information is information used by a user of the user terminals 120, 121, and 122 to activate a user application for transmitting access information through the access control unit. For example, the administrator terminal 110 can generate application activation authentication information by encrypting the first phone information using a first key. Here, the application activation authentication information may be encrypted information such as "762D ". In another example, the administrator terminal 110 may encrypt the first phone information and the random number (PADDING) information using a first key to increase the complexity of encryption to generate application activation authentication information .

The administrator terminal 110 may include the user identification information in the application activation authentication information. For example, when the application activation authentication information is "762D" and the user phone number is "010-2222-8888", the administrator terminal 110 transmits "762D8888 (application activation authentication information + Lt; / RTI > In addition to the phone number, the administrator terminal 110 can add the user's name, department name, and alias to the application activation authentication information. By adding user related information, the user can easily recognize whether the application activation authentication information is his / her own.

The administrator terminal 110 may transmit the application activation authentication information to the access controller 130. [

The administrator terminal 110 may transmit an access setting message including the application activation authentication information to the user terminals 120, 121, and 122. The access setting message may include executable program information for automatically executing the user application or automatic download information for automatically downloading the user application. For example, the user terminals 120, 121, and 122 may automatically execute the user application using the execution program information included in the received access setting message. As another example, the user terminals 120, 121, and 122 may automatically download the user application using the automatic download information included in the received access setting message. Accordingly, the user of the user terminal can easily operate or install the user application even if it is not through a separate process.

The administrator terminal 110 may be provided with a manager application capable of performing the above functions.

The user terminals 120, 121, and 122 may activate the user application when the application activation authentication information is input. For example, when the user inputs application activation authentication information to the user terminals 120, 121, and 122 through the user application, the user terminals 120, 121, and 122 transmit the input application activation authentication information to the access controller 130, . The access control unit 130 compares the application activation authentication information received from the user terminals 120, 121, and 122 and the application activation authentication information received from the administrator terminal 110, and transmits the result of the matching to the user terminal . The user terminals 120, 121, and 122 may activate or deactivate the user application according to the matching result received from the access controller 130. If it is not matched, the access controller 130 transmits the result information to the administrator terminal 110 so that the administrator can recognize the result information.

When the user terminals 120, 121, 122 are connected to the access controller 130, the user terminals 120, 121, 122 can encrypt the application activation authentication information again to generate the door release information. In another example, when the user terminals 120, 121, 122 are connected to the access controller 130, the user terminals 120, 121, 122 encrypt the application activation authentication information and access time information, .

The user terminals 120, 121, and 122 may transmit the generated door release information and the second phone information corresponding to the user terminal to the access controller 130. The second phone information may be stored in the user terminals 120, 121, and 122. The user terminals 120, 121 and 122 may store information (for example, department name, rank, name, etc.) of the users of the user terminals 120, 121 and 122 in addition to the second phone information.

The user terminals 120, 121, and 122 may generate the door release information by encrypting the application activation authentication information and the connection time information stored in the user terminal using the second key.

The user terminals 120, 121, and 122 may include a wicket module including phone ID information including first phone number information, and may generate door wakeup information using phone number information included in the wicket module have.

The user terminals 120, 121, and 122 may be installed with an administrator application capable of performing the above functions.

The access control unit 130 may include a reader unit 131 and a control unit 132. The reader unit 131 can receive information from the user terminals 120, 121, and 122 through the local area communication method. For example, when the short distance communication method is the NFC communication method, the reader unit 131 can receive information from the user terminals 120, 121 and 122 when the user terminals 120, 121 and 122 are connected. The control unit 132 performs user authentication based on various pieces of information received from the administrator terminal 110 and the user terminals 120, 121 and 122, Function can be handled.

The access controller 130 compares the first phone information obtained by decrypting the application activation authentication information received from the administrator terminal 110 and the second phone information received from the user terminals 120, 121 and 122, If it is matched, the user terminal 120, 121, 122 can release the corresponding door lock.

The access controller 130 decrypts the door release information received from the user terminals 120, 121 and 122 and determines whether the acquired application activation authentication information and the application activation authentication information received from the administrator terminal 110 are matched do. The access controller 130 determines that the information is not hacked if it is matched, and determines that the information is hacked if it is not. If it is determined that the access control unit 130 is not the hacked information, the entrance control unit 130 can release the door lock.

The access controller 130 decrypts the application activation information obtained by decrypting the door release information received from the user terminals 120, 121 and 122, and decrypts the obtained first phone information and the received first phone information from the administrator terminal 110 It is possible to determine whether the first phone information obtained by decoding the application activation authentication information is matched. The access controller 130 determines that the information is not hacked if it is matched, and determines that the information is hacked if it is not. If it is determined that the access control unit 130 is not the hacked information, the entrance control unit 130 can release the door lock.

The access controller 130 decrypts the door release information received from the user terminals 120, 121, and 122 to obtain access time information, and obtains access time information from among the acquired access time information and the current time information recognized by the access control unit 130 Is within a set time. The access controller 130 determines that the information is not hacked information within a predetermined time, and determines that the information is hacked if the information exceeds the set time. If it is determined that the access control unit 130 is not the hacked information, the entrance control unit 130 can release the door lock. For example, when the connection time information is 10:00, the current time information is 10:10 seconds, and the set time is 1 minute, the access controller 130 calculates the time difference ('10 seconds 'Is within the set time (' 1 minute '), it can be determined that the door release information is information that is not hacked.

The access controller 130 may decrypt the application activation authentication information received from the administrator terminal 110 using a first key.

The access controller 130 may decrypt the door release information received from the user terminals 120, 121, and 122 using a second key to obtain application activation authentication information. The access controller 130 may obtain the first phone information by decrypting the decrypted application activation authentication information again using a first key. As described above, by using the double-encrypted door release information, the access control system can provide more excellent security.

The access controller 130 may generate the access statistics information of the user based on the information obtained during the release of the door lock ('first phone information, application activation authentication information, door release information, connection time information, hacking information, have.

The administrator terminal 110, the user terminals 120, 121 and 122 and the entrance control unit 130 may include a short-range communication module and may transmit and receive information through the short-range communication module. For example, short-range wireless communications can be wirelessly communicated over a short distance, such as near field communication (NFC), bluetooth, beacon, Magnetic Secure Transmission (MST), and ultra wideband (UWB) It means various types of communication methods that can transmit and receive.

Since the access control system does not have a separate server for access control by handling the access control by using the administrator terminal, it is possible not only to reduce the management cost and labor cost for server construction and maintenance, Access control can be conveniently set / changed in real time.

Also, the access control system encrypts and transmits user authentication information and the like, thereby minimizing the damage caused by authentication information leakage, thereby improving security.

In addition, according to the present invention, it is possible to prevent the door lock from being released due to hacking by determining whether or not the door release information received from the user terminal is hacked, and then releasing the door lock according to the determination result.

FIG. 2 is a diagram for explaining a method of transmitting and receiving information using a HCE (Host Card Emulation) scheme according to the present invention.

Referring to FIG. 2, the administrator terminal 110 may transmit information to the NFC reader 132 using an HCE (Host Card Emulation) scheme. In this case, the NFC reader 132 may transmit the information received from the administrator terminal 110 to the control unit 131. In this case, the control unit 131 can receive the information from the administrator terminal 110 through the NFC reader unit 132.

3 is a diagram for explaining a method of transmitting and receiving information using the Bluetooth method according to the present invention.

Referring to FIG. 2, the administrator terminal 110 can directly transmit information to the controller 131 using the Bluetooth method. In this case, the control unit 131 can transmit the information received from the administrator terminal 110 to the reader unit 132. [

In this case, the control unit 131 can directly receive information from the administrator terminal 110. [

4 is a diagram for explaining a method of activating a user registration and a user application.

Referring to FIGS. 1 and 4, an administrator can register first phone information through an administrator application of the administrator terminal 110. In addition to the first phone information, the user's name / department name / entrance information / ID type information can be registered.

When the administrator inputs the first phone information through the administrator application of the administrator terminal 110, the administrator terminal 110 can generate application activation authentication information (for example, 41CF). The administrator terminal 110 may transmit the generated application activation authentication information to the access control unit 130. [

Also, the administrator can transmit the application activation authentication information to the user who wants to register offline.

The user who receives the application activation authentication information from the manager executes the user application of the user terminal and inputs the application activation authentication information.

For example, the user terminal 120 transmits the inputted application activation authentication information to the access control unit 130, and the access control unit 130 transmits the application activation authentication information, which is received from the administrator terminal 110, It is determined whether or not they match.

If it is determined that they match, the access controller 130 transmits information indicating that the access controller 130 matches the user terminal 120, and the user terminal 120 can activate the user application.

The user terminal 120 receives the application activation authentication information from the access control unit 130 and the user mobile terminal 120 transmits the application activation authentication information received from the access control unit 130 and the application activation authentication information received from the user terminal 120 ) Can be judged whether the inputted application activation authentication information is identical or not. If it is determined that they match, the user terminal 120 can activate the user application.

FIGS. 5, 6, and 7 are diagrams for explaining a method for authenticating access to / from a user terminal.

1 and 5, a user connects the access controller 130 using the user terminal 120. In the present embodiment, the case where the user connects the user terminal 120 is described as a reference, but the connection using various short-range communication methods such as connecting the user terminal 120 and the access controller 130 by activating the Bluetooth communication It is possible.

Referring to FIGS. 1 and 6, when the tag of the user terminal 120 is recognized, the access controller 130 can transmit an information request signal to the user terminal 120.

1 and 7, when an information request signal is received from the access controller 130, the user terminal 120 encrypts second phone information, application activation authentication information, and connection time information of the user terminal, Thereby generating door release information, and transmitting the generated door release information to the entrance control system 130. [

The access controller 130 may decode the received door release information to obtain information included in the door release information.

In this way, the access control system improves the security by transmitting and receiving the information to be transmitted and received.

8 is a diagram for explaining an administrator application according to an embodiment of the present invention.

Referring to FIG. 8, the manager application includes a reader registration and name setting function, a user information registration / modification / deletion function, an access control time schedule setting function, a reader setting changing function, , And a user interface (UI) that can set each function in detail.

In addition, the manager application may include items such as HCE communication and Bluetooth communication that can set the communication method.

The manager application may include various items in addition to the items shown in Fig.

FIG. 9 is a flowchart illustrating an access control method according to an embodiment of the present invention.

Referring to FIGS. 1 and 9, when the first phone information is registered (900), the administrator terminal 110 may generate application activation authentication information (901).

The administrator terminal 110 may transmit the generated application activation authentication information to the access controller 130 (902).

When the application activation authentication information is input (903), the user terminal 120 transmits the application activation authentication information to the access controller 130 (904).

The access control unit 130 may determine whether the application activation authentication information received from the administrator terminal 110 and the application activation authentication information received by the user terminal 120 match (905). The access controller 130 may transmit the result of the coincidence determination to the user terminal 120 (906).

If it is determined that the results received from the access controller 130 are identical, the user terminal 120 can activate the user application (907). In contrast, if it is determined that the results received from the access controller 130 do not match, the user terminal 120 may deactivate the user application.

When the user terminal 120 and the access controller 130 are connected 908, the access controller 130 may transmit an information request signal to the user terminal 120 (909).

When the information request signal is received from the access controller 130, the user terminal 120 may generate the door release information by encrypting the second phone information stored in the user terminal, the application activation authentication information, and the connection time information of the user terminal (910).

The user terminal 120 may transmit the second phone information and the generated door release information to the entrance control unit 130 (911).

The access controller 130 may obtain the first phone information by decrypting the application activation authentication information, and may decrypt the door release information to acquire the second phone information, the application activation authentication information, and the connection time information. The access controller 130 may authenticate the user of the user terminal 120, 121, 122 based on the acquired information (912).

When the authentication of the user of the user terminals 120, 121, and 122 is completed, the access controller 130 may generate the access statistics information of the user based on the second phone information, application activation authentication information, connection time information, and the like 913).

The embodiments described may be constructed by selectively combining all or a part of each embodiment so that various modifications can be made.

It should also be noted that the embodiments are for explanation purposes only, and not for the purpose of limitation. In addition, it will be understood by those of ordinary skill in the art that various embodiments are possible within the scope of the technical idea of the present invention.

100: Access control system
110: administrator terminal
120, 121 and 122:
130: Access control system

Claims (8)

1. An access control system including an administrator terminal, a user terminal and an access control device,
Wherein the manager terminal generates an application activation authentication information by encrypting the first phone information when the first phone information of a passenger who is permitted to enter and exit is registered and transmits the application activation authentication information to the entrance control device Respectively,
The user terminal activates a user application stored in the user terminal when the application activation authentication information is input, and when the user terminal is connected to the access control device, encrypts the application activation authentication information again to generate door release information And activates a user application that transmits the generated door release information and second phone information corresponding to the user terminal to the access control device,
The access control device compares the first phone information obtained by decrypting the application activation authentication information received from the administrator terminal and the second phone information received from the user terminal, releases the corresponding door lock when it is matched, Determines whether the application activation authentication information obtained by decrypting the door release information received from the user terminal and the application activation authentication information received from the administrator terminal are matched, and checks whether the door release information is hacked information And when the door is matched, the door lock is released.
delete The method according to claim 1,
The access control device includes:
The first phone information obtained by decrypting the application activation authentication information obtained by decrypting the door release information received from the user terminal and the application activation authentication information received from the administrator terminal, Determines whether or not the information is matched, confirms whether the door release information is the hacked information, and releases the door lock if it is matched.
The method according to claim 1,
The user terminal comprises:
Encrypting the connection time information of the user terminal and the controller and the authentication information to generate the door release information,
The access control device includes:
The access control unit decrypts the door release information received from the user terminal to obtain access time information, and determines whether a time difference between the acquired access time information and the current time information recognized by the access control unit is within a set time, The access control system checks whether the door release information is the hacked information, and releases the door lock if the door release information is within the set time.
1. An access control system including an administrator terminal, a user terminal and an access control device,
Wherein the manager terminal generates an application activation authentication information by encrypting the first phone information when the first phone information of a passenger who is permitted to enter and exit is registered and transmits the application activation authentication information to the entrance control device Respectively,
The user terminal activates a user application stored in the user terminal when the application activation authentication information is input, and when the user terminal is connected to the access control device, encrypts the application activation authentication information again to generate door release information And activates a user application that transmits the generated door release information and second phone information corresponding to the user terminal to the access control device,
The access control device compares the first phone information obtained by decrypting the application activation authentication information received from the administrator terminal and the second phone information received from the user terminal, releases the corresponding door lock when it is matched,
Wherein the manager terminal comprises:
Encrypting the first phone information using a first key to generate the application activation authentication information,
The access control device includes:
And decrypting the application activation authentication information received from the administrator terminal using a first key.
6. The method of claim 5,
The user terminal comprises:
Generates the door release information by encrypting the application activation authentication information again using the second key,
The access control device includes:
Decrypting the door release information received from the user terminal using a second key to obtain the application activation authentication information, and transmitting the decrypted application activation authentication information to the application activation authentication information using a first key And obtains the first phone information by decrypting the first phone information.
The method according to claim 1,
The access control device includes:
And generates access statistical information of a user based on the information obtained while releasing the door lock.
The method according to claim 1,
Wherein the manager terminal, the user terminal, and the access control unit include a local area communication module and transmit / receive information through the local area communication module.

Images