KR102682490B1 - Method for unmanned self-service storage service and unmanned self-service storage system - Google Patents

Abstract

An unmanned self-storage service method and an unmanned self-storage system are disclosed. The unmanned self-storage service method and unmanned self-storage system according to an embodiment of the present invention generate an encrypted authentication code using an authentication code generation key and perform access authentication and storage authentication using the authentication code, thereby improving security. can increase. In addition, as the encrypted authentication code is converted into a QR code to perform access authentication and storage authentication, users can conveniently use the unmanned self-storage service using the QR code.

Description

{Method for unmanned self-service storage service and unmanned self-service storage system}

The present invention relates to product storage and management service technology.

Self-storage is short for ‘self-service storage’ and refers to a service business that rents storage space, such as a warehouse, to store and manage customers’ items. Through unmanned self-storage services, customers can deposit, store, and retrieve their luggage directly from storage without on-site assistance from operator staff.

Urban self-storage is a type of self-storage business that considers convenience as more important in an “on demand” manner, and management of more difficult storage environments (temperature, humidity, quarantine, security system, etc.) is important.

Due to the influence of individual and corporate demand groups concentrated in urban areas, Korea's urban self-storage business model is evolving by emphasizing Hong Kong or Singapore-style “on demand” characteristics rather than American-style self-storage characteristics.

It is necessary to introduce an online-based reservation/payment system and build an unmanned operation management system that can satisfy the rapidly increasing demand for self-storage.

Republic of Korea Patent Publication No. 10-2023-0081735 (publication date: June 8, 2023)

According to one embodiment, an unmanned self-storage service method and an unmanned self-storage system are proposed that increase security by enabling on-site access and storage use through authentication code management, and improve the convenience of membership registration, service application, and use.

The unmanned self-storage service method according to an embodiment of the present invention includes a service preparation step in which the integrated server generates an authentication code generation key according to the request of the administrator terminal, and the integrated server generates the member's unique value according to the membership registration request of the user terminal. A membership registration and service application stage in which an integrated server generates an encrypted authentication code using the authentication code generation key according to the service application of the user terminal, and the entrance door of the user terminal that has applied for the membership and service The door opening step is to perform access authentication by converting the encrypted authentication code into a QR code according to the opening request, and the integrated server converts the encrypted authentication code into a QR code according to the storage use request of the user terminal after opening the door. It includes a storage use step of converting and performing storage authentication.

The authentication code generation key is used to encrypt the access authentication code required when the user requests to open the door through the access controller installed at the service point, and when the user requests storage use through an IoT lock within the service point. It may include a storage authentication code generation key to encrypt the storage authentication code required.

In the service preparation step, the management server authenticates the administrator according to the request of the administrator terminal. If authentication is successful, the administrator terminal selects a service point by administrator input and requests key generation to the authentication server through the management server. A step where the authentication server generates an access authentication code generation key and each storage authentication code generation key and stores them in the IoT lock DB, and the authentication server transmits the access authentication code generation key to the access controller and authenticates each storage. It may include a step of transmitting a code generation key to each IoT lock, and a step of the authentication server transmitting a key generation response message to the administrator terminal through the management server.

In the membership registration and service application stage, the user terminal requests membership registration from the service server, and the service server generates a unique member value and processes the membership registration, then maps the member ID and unique value and stores it in the user DB. After registering as a member, the user terminal requests the service server to apply for the service including optional information about the service point, storage size, and usage period, and the service server checks the member's unique value stored in the user DB, A step of requesting the authentication server to generate an authentication code along with the service point, storage size, usage period, and member-specific value information, and the authentication server generating an access authentication code generation key for the service point stored in the IoT lock DB and the corresponding storage authentication code. It may include confirming the key, generating an access authentication code using the access authentication code generation key, and generating a storage authentication code using the corresponding storage authentication code generation key.

The step of generating the access authentication code includes the steps where the authentication server generates data for the access authentication code to generate the access authentication code, and the authentication server encrypts the data for the access authentication code using the access authentication code generation key. It includes the step of generating an access authentication code, and the data for the access authentication code may include a member's unique value, period of use, branch code, and random value information.

The step of generating a storage authentication code is where the authentication server generates data for the storage authentication code to generate the storage authentication code, and the authentication server encrypts the data for the storage authentication code using the storage authentication code generation key. It includes the step of generating a storage authentication code, and the data for the storage authentication code may include a member's unique value, period of use, storage code, and random value information.

In the door opening step, the user terminal requests a QR code for access from the service server, the service server checks the member's unique value in the user DB, and requests the IoT lock DB to generate a QR code for access. A step where the IoT lock DB checks the access authentication code, sets the access validity period, and then generates a QR code for access including the access authentication code and the access validity period, and the QR for access for which the IoT lock DB is created. A step of transmitting the code to the user terminal through the service server or displaying the QR code for access on the access controller, and the user terminal scanning the QR code for access, and sending the scanned QR code for access and the member's unique value to the access controller. It may include a transmitting step.

In the door opening step, when the access controller is online, the access controller requests QR code authentication for access from the IoT lock DB, and the IoT lock DB checks the expiration date and decrypts the encrypted authentication code. It may further include authenticating the QR code for access, and when authentication is successful, the IoT lock DB transmits an authentication success message to the access controller, and the access controller opens the door.

In the door opening step, if the access controller is offline, the access controller analyzes the QR code for access to check the validity period, and if the current time of the access controller is within the validity period, the access controller sends an authentication code to authenticate access. It may further include a step of performing authentication by decrypting with a code generation key, and a step of the access controller opening the door when authentication is successful.

The storage use step is a step where the user terminal requests a QR code for storage from the service server, a step where the service server checks the member's unique value in the user DB, and requests the IoT lock DB to generate a QR code for storage. A step where the IoT lock DB verifies the storage authentication code, sets the access validity period, and then generates a QR code for storage including the access authentication code and the access validity period, and the QR for storage in which the IoT lock DB is created. It may include the step of transmitting a code to a user terminal through a service server, the user terminal scanning a storage QR code, and transmitting the scanned storage QR code and the member's unique value to the access controller.

The storage use step is when the IoT lock is online, the IoT lock requests QR code authentication for storage from the IoT lock DB, and the IoT lock DB checks the expiration date and sends an encrypted authentication code. It may further include decrypting and authenticating the QR code for storage, and upon successful authentication, the IoT lock DB transmits an authentication success message to the IoT lock, and the IoT lock unlocks the storage.

In the storage use step, if the IoT lock is offline, the IoT lock analyzes the QR code for storage to check the validity period, and if the current time of the IoT lock is within the validity period, the IoT lock authenticates. It may further include a step of performing authentication by decrypting the code with a storage authentication code generation key, and a step of the IoT lock unlocking the storage when authentication is successful.

An unmanned self-storage system according to another embodiment includes an administrator terminal that manages service users, a user terminal that requests membership registration and service application, requests to open the door and use storage, and generates an authentication code upon request from the administrator terminal. Generates a key, generates a unique member value according to the user terminal's request for membership registration, processes the membership registration, generates an encrypted authentication code using the authentication code generation key according to the user terminal's service application, and applies for membership registration and service. Access authentication is performed by converting the encrypted authentication code into a QR code in response to a door opening request from a user terminal, and storage authentication is performed by converting the encrypted authentication code to a QR code in response to a storage use request from a user terminal after opening the door. It includes an integrated server that opens the door according to access authentication, an access controller that opens the door according to access authentication, and an IoT lock that unlocks the storage according to storage authentication.

According to an unmanned self-storage service method and an unmanned self-storage system according to an embodiment, on-site access and storage use is possible through authentication code management, thereby improving security. For example, security can be improved by generating an encrypted authentication code using an authentication code generation key and performing access authentication and storage authentication using the authentication code.

In addition, according to the unmanned self-storage service method and unmanned self-storage system, the convenience of membership registration, service application, and use is improved. For example, by converting the encrypted authentication code into a QR code to perform access authentication and storage authentication, users can conveniently use unmanned self-storage services using the QR code.

1 is a diagram showing the configuration of an unmanned self-storage system according to an embodiment of the present invention;
Figure 2 is a diagram showing the detailed configuration of the integrated server of Figure 1 according to an embodiment of the present invention;
Figure 3 is a diagram illustrating a process of an unmanned self-storage service method according to an embodiment of the present invention;
Figure 4 is a diagram illustrating an unmanned self-storage service preparation process according to an embodiment of the present invention;
Figure 5 is a diagram illustrating a membership registration and service application process for an unmanned self-storage service according to an embodiment of the present invention;
6 is a diagram illustrating a data structure for an authentication code and an authentication code generation process according to an embodiment of the present invention;
Figure 7 is a diagram illustrating a door opening process through access authentication when the access controller is online according to an embodiment of the present invention;
Figure 8 is a diagram illustrating a door opening process through access authentication when the access controller is offline according to an embodiment of the present invention;
Figure 9 is a diagram illustrating a storage use process through storage authentication when an IoT lock device is online according to an embodiment of the present invention;
Figure 10 is a diagram illustrating a storage use process through storage authentication when an IoT lock device is offline according to an embodiment of the present invention.

The above objects, other objects, features and advantages of the present invention will be easily understood through the following preferred embodiments related to the attached drawings. However, the present invention is not limited to the embodiments described herein and may be embodied in other forms. Rather, the embodiments introduced herein are provided so that the disclosed content will be thorough and complete and so that the spirit of the present invention can be sufficiently conveyed to those skilled in the art.

In this specification, when an element is referred to as being on another element, it means that it may be formed directly on the other element or that a third element may be interposed between them.

In this specification, when terms such as first, second, etc. are used to describe components, these components should not be limited by these terms. These terms are merely used to distinguish one component from another. Embodiments described and illustrated herein also include complementary embodiments thereof.

Additionally, when a first element (or component) is referred to as being operated or executed on (ON) a second element (or component), the first element (or component) means that the second element (or component) is ON. It should be understood as being operated or executed in an environment in which it is operated or executed, or operated or executed through direct or indirect interaction with a second element (or component).

If any element, component, device, or system is said to contain a component consisting of a program or software, even if explicitly stated, that element, component, device, or system is not intended to allow that program or software to run or operate. It should be understood as including hardware (e.g., memory, CPU, etc.) or other programs or software (e.g., operating system or drivers required to run the hardware) required to run the computer.

Additionally, when an element (or component) is implemented, unless otherwise specified, it should be understood that the element (or component) may be implemented in any form of software, hardware, or software and hardware.

Additionally, the terms used in this specification are for describing embodiments and are not intended to limit the present invention. As used herein, singular forms also include plural forms, unless specifically stated otherwise in the context. As used in the specification, 'comprises' and/or 'comprising' does not exclude the presence or addition of one or more other elements.

Hereinafter, in describing the specific embodiments below, various specific details have been written to explain the invention in more detail and to aid understanding. However, a reader with sufficient knowledge in the field to understand the present invention can recognize that it can be used without these various specific details.

In some cases, it is mentioned in advance that when describing the invention, parts that are commonly known but are not significantly related to the invention are not described in order to prevent confusion without any reason in explaining the invention.

Hereinafter, embodiments of the present specification will be described with reference to the attached drawings. A detailed explanation will be given focusing on the parts necessary to understand the operations and functions according to the present specification. While explaining the embodiments of this specification, description will be omitted for technical content that is well known in the technical field to which this specification belongs and that is not directly related to this specification. This is to convey the gist of this specification more clearly without obscuring it by omitting unnecessary explanation.

Additionally, when describing the components of the present specification, different reference numerals may be assigned to components with the same name depending on the drawings, and the same reference numerals may be assigned to different drawings. However, even in this case, it does not mean that the corresponding component has different functions depending on the embodiment or that it has the same function in different embodiments, and the function of each component is different from the corresponding embodiment. The judgment should be made based on the description of each component in .

In this specification, each component indicates that it can be separated functionally and/or logically, and does not necessarily mean that each component is divided into a separate physical device or written in a separate code. The average expert will be able to infer easily.

Additionally, each configuration in this specification may mean a functional and structural combination of hardware for carrying out the technical idea of the present invention and software for driving the hardware. For example, it may mean a predetermined code and a logical unit of hardware resources for executing the predetermined code, and does not necessarily mean a physically connected code or one type of hardware. It can be easily inferred by the average expert.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

Figure 1 is a diagram showing the configuration of an unmanned self-storage system according to an embodiment of the present invention.

Referring to Figure 1, the unmanned self-storage system (1) includes an access controller (11), an IoT lock (12), an integrated server (13), an administrator terminal (14), a user terminal (15), and storage (16). Includes.

The access controller 11 controls at least one of the door, storage lighting, and unmanned security system. When an authenticated member is confirmed, the access controller 11 opens the door, turns on lights installed on the ceiling and storage (automatically turns off after a preset time), and disables the unmanned security system.

The access controller 11 may include a monitor and a payment machine. The monitor may be a touch screen. Existing members can enter by entering their password on the monitor (or keypad terminal). As another example, existing members can enter the door without a password by scanning (photographing) the QR code on the monitor screen through the user terminal 15. Likewise, there is a way to go through the authentication process by scanning the QR code on the monitor screen, or in another embodiment, you can go through the authentication process after recognizing the QR code attached to the door with the camera in the terminal. Prospective members can receive a one-time temporary number via text message and enter the gate. When a prospective member applies for new storage, the service can be used immediately after payment through the payment machine.

Each IoT lock (12a, 12b, ..., 12n) is mounted on each storage (16a, 16b, ..., 16n), and unlocks and opens the corresponding storage (16a, 16b, ..., 16n). The IoT lock 12 is in a keypad format, and the user can unlock the IoT lock 12 by entering a password on the keypad. As another example, the user can unlock the IoT lock 12 through the mobile web of the user terminal 15. When the IoT lock 12 is connected to a power supply, it can be free from battery replacement issues and unmanned operation is possible.

The integrated server 13 provides storage services to the user terminal 15 and generates and manages authentication codes. The integration server 13 may include a service server, management server, and authentication server. The integrated server 13 can communicate wirelessly with each IoT lock device 12a, 12b, ..., 12n through a gateway. The detailed configuration of the integrated server 13 will be described later with reference to FIG. 2.

The administrator terminal 14 can register, modify, and delete service users. Additionally, you can check or change your password, and check your usage history and payment history. In addition, as an additional function, the administrator terminal 14 can register, modify, and delete the service period of service users and stop the service of delinquent users. It can also reset each terminal to its original state before use, and has sensors such as lock failure, etc. A device failure alarm can also be generated through .

The user terminal 15 may request the access controller 11 to open or unlock the IoT lock 12 through the App, Web, or Mobile Web. For example, the user terminal 15 can request the door to be opened by taking a photo of the QR code on the monitor screen of the access controller 11 and transmitting it through the mobile web. The user terminal 15 may request unlocking of the IoT lock 12 through the mobile web. At this time, the user terminal 15 can request opening the door and unlocking the IoT lock 12 with one touch.

FIG. 2 is a diagram illustrating the detailed configuration of the integrated server of FIG. 1 according to an embodiment of the present invention.

Referring to Figures 1 and 2, the integrated server 13 includes a service server 131, a management server 132, an authentication server 133, a user DB 134, and an IoT lock DB 135.

The management server 132 authenticates the administrator according to the request of the administrator terminal 14 and manages service users through the authenticated administrator.

The service server 131 can process membership registration and service applications of the user terminal 15. For example, when the user terminal 15 requests membership registration, a unique member value is generated, the membership registration is processed, and then the member ID and the unique value are mapped and stored in the user DB 134. After membership registration, when the user terminal 15 requests the service server 131 to apply for a service including selection information about the service point, storage size, and usage period, the service server 131 stores the information stored in the user DB 134. Check the member's unique value. Next, the service server 131 requests the authentication server 133 to generate an authentication code along with service point, storage size, usage period, and member unique value information.

The service server 131 may request the IoT lock DB 135 to generate a QR code for access and a QR code for storage. For example, when the user terminal 15 requests a QR code for access to the service server 131, the service server 131 checks the member's unique value in the user DB 134 and retrieves the IoT lock DB 135. Request to create a QR code for access. As another example, when the user terminal 15 requests a QR code for storage from the service server 131, the service server 131 checks the member's unique value in the user DB 134 and enters the IoT lock DB 135. Request to create a QR code for storage.

The authentication server 133 can generate an access authentication code generation key and each storage authentication code generation key. Additionally, the authentication server 133 can generate an access authentication code using the access authentication code generation key and can generate a storage authentication code generation key using the storage authentication code generation key.

For example, the authentication server 133 generates an access authentication code generation key and each storage authentication code generation key and stores them in the IoT lock DB 135. Subsequently, the authentication server 133 transmits the access authentication code generation key to the access controller 11, and transmits each storage authentication code generation key to each IoT lock device 12a, 12b, ..., 12n.

The authentication server 133 can check the access authentication code generation key of the service point stored in the IoT lock DB 135 and the corresponding storage authentication code generation key. Subsequently, the authentication server 133 can generate an access authentication code using the access authentication code generation key and can generate a storage authentication code using the corresponding storage authentication code generation key.

Member-specific values are stored in the user DB 134.

The IoT lock DB 135 can check the access authentication code, set the access validity period, and then generate a QR code for access including the access authentication code and the access validity period. As another example, the IoT lock DB 135 may check the storage authentication code, set the access validity period, and then generate a QR code for storage including the access authentication code and the access validity period.

Figure 3 is a diagram illustrating a process of an unmanned self-storage service method according to an embodiment of the present invention.

Referring to Figures 1 and 3, the unmanned self-storage service method includes a service preparation step (310), a membership registration and service application step (320), a door opening step through access authentication (330), and storage use through storage authentication. Includes step 340.

In the service preparation step 310, the integrated server 13 generates an authentication code generation key according to the request of the administrator terminal 14. The service preparation step 310 will be described in detail later with reference to FIG. 4.

Next, in the membership registration and service application step 320, the integrated server 13 generates a unique member value according to the membership registration request of the user terminal 15 and processes the membership registration. Then, according to the self-storage service application of the user terminal 15, the integrated server 13 generates an encrypted authentication code using the authentication code generation key. The membership registration and service application step 320 will be described in detail later with reference to FIGS. 5 and 6.

Next, in the door opening step 330 through access authentication, in response to a door opening request from the user terminal 15 that has registered for membership and applied for the service, the integrated server 13 converts the encrypted authentication code into a QR code to authenticate access. Perform. The door opening step 330 through access authentication will be described in detail later with reference to FIGS. 7 and 8.

Next, in the storage use step 340 through storage authentication, the integrated server 13 converts the encrypted authentication code into a QR code according to the storage use request of the user terminal 15 after opening the door and performs storage authentication. The storage use step 340 through storage authentication will be described in detail later with reference to FIGS. 9 and 10.

Figure 4 is a diagram illustrating an unmanned self-storage service preparation process according to an embodiment of the present invention.

Referring to FIGS. 1, 2, and 4, the manager terminal 14 logs in to the management server 132 by entering an identifier (ID) and password (PW) for login (401). The management server 132 verifies the entered ID and PW, authenticates the administrator (402), and transmits the administrator authentication result to the administrator terminal 14 (403).

If authentication is successful, the administrator terminal 14 selects a service point (for example, point A) through administrator input and requests the management server 132 to generate a key (404). At this time, the key is an access authentication code generation key to generate an access authentication code for opening the door through the access controller (11) installed at the selected service point, and a storage authentication code for opening the storage through the IoT lock (12). Contains a storage authentication code generation key to generate. The management server 132 transmits a key creation request to the authentication server 133 (405).

Next, the authentication server 133 generates a key according to the key generation request (406). For example, the authentication server 133 generates an access authentication code generation key Key_A, storage authentication code generation keys Key_A001, Key_A002,... , creates Key_Axxx. At this time, the authentication server 133 can generate a storage authentication code generation key equal to the number of storages in the branch. The access authentication code generation key and the storage authentication code generation key may be symmetric keys (eg, AES128).

Subsequently, the authentication server 133 uses the generated access authentication code generation key Key_A and each storage authentication code generation key Key_A001, Key_A002,... , Key_Axxx is stored in the IoT lock DB (135) (407).

Next, the authentication server 133 transmits the access authentication code generation key Key_A to the access controller 11 (408). In addition, the authentication server 133 generates each storage authentication code keys Key_A001, Key_A002,... , Key_Axxx is transmitted to each IoT lock (12a, 12b, …, 12n) (409).

Next, the authentication server 133 transmits a key creation response message to the management server 132 (410), and the management server 132 transmits a key generation completion message to the administrator terminal 14 (411).

Figure 5 is a diagram illustrating a membership registration and service application process for an unmanned self-storage service according to an embodiment of the present invention.

Referring to FIGS. 1, 2, and 5, in the membership registration step (500), the user terminal 15 requests membership registration to the service server 131 (501). At this time, the user terminal 15 can make a request while transmitting the user's ID, PW, and terminal number.

Next, the service server 131 generates a unique member value (64 bits) and processes membership registration (502), maps the member ID and unique value, stores it in the user DB 134 (503), and stores the membership registration result. is transmitted to the user terminal 15 (504).

Next, in the service application step (510), the user terminal 15 requests a service application from the service server 131 (511). At this time, the user terminal 15 may transmit selection information about the service point, storage size, and usage period. At this time, it is assumed that the user terminal 15 selects storage A001 at point A.

The service server 131 confirms the service application of the user terminal 15 and requests payment (512). Then, the user terminal 15 transmits payment information to the service server 131 (513), and the service server 131 processes the payment (514). Payments can be made through an external electronic payment agency (Payment Gateway: PG), etc.

Next, the service server 131 checks the member's unique value (64 bits) stored in the user DB 134 (515) and requests the authentication server 133 to generate an authentication code (516). At this time, the service server 131 may make a request while transmitting branch, storage size, usage period, and member-specific value information.

The authentication server 133 checks (517) the access authentication code generation key Key_A of point A stored in the IoT lock DB 135 and the corresponding storage authentication code generation key Key_A001, and then enters using the access authentication code generation key Key_A. Generate an authentication code and generate a storage authentication code using the corresponding storage authentication code generation key Key_A001 (518). Subsequently, the authentication server 133 transmits an authentication code generation completion message to the service server 131 (519), and the service server 131 transmits a service application completion message to the user terminal 15. Do (520).

Figure 6 is a diagram illustrating a data structure for an authentication code and an authentication code generation process according to an embodiment of the present invention.

More specifically, FIG. 6A is a diagram illustrating a data structure for an access authentication code, and FIG. 6B is a diagram illustrating an authentication code generation process.

With reference to FIGS. 1, 2, and 6, the access authentication code generation process will be described.

The authentication server 133 generates access authentication code data (32 bytes) 610 to generate the access authentication code. The access authentication code data (32 bytes) 610 may include member unique value (8 bytes), usage period (14 bytes), branch code (4 bytes), and random value (6 bytes) information. For example, the data 610 for the access authentication code is 00001111 20230514110000 0001 465677. At this time, the size of each data field can be changed.

Next, the authentication server 133 generates an encrypted access authentication code 630 by encrypting the access authentication code data 610 using the access authentication code generation key Key_A (620).

Below, the storage authentication code generation process will be described.

The storage authentication code generation process is similar to the access authentication code generation process described above. However, the branch code is replaced with a storage code (4 bytes). That is, the storage authentication code data (32 bytes) may include member unique value (8 bytes), usage period (14 bytes), storage code (4 bytes), and random value (6 bytes) information. The authentication server 133 generates storage authentication code data to generate the storage authentication code, and encrypts the storage authentication code data using the storage authentication code generation key Key_A001 to generate an encrypted storage authentication code.

The encrypted and hashed authentication code is stored in the IoT lock DB (135) through the authentication server (133). The authentication code is then used to generate a QR code when the user enters the door or uses storage.

Figure 7 is a diagram illustrating a door opening process through access authentication when the access controller is online according to an embodiment of the present invention.

Referring to FIGS. 1, 2, and 7, the user terminal 15 that has registered as a member and applied for a service logs in to the service server 131 to enter the door of the service point and requests a QR code for access (701) ).

Next, the service server 131 checks the member unique value (64 bytes) in the user DB 134 (702) and requests the IoT lock DB 135 to generate a QR code for access (703). At this time, the service server 131 may make a request while transmitting the member's unique value (64 bytes) to the IoT lock DB 135.

Then, the IoT lock DB 135 1. checks the access authentication code, and 2. sets the access validity period. For example, the IoT lock DB 135 can set the access validity period to 1 hour after the current time (14 byte data YYYYMMDDhhmmss). Next, the IoT lock DB 135 generates a QR code (total 48 bytes) for entry (704). The QR code for access (total 48 bytes) includes an encrypted authentication code (32 bytes) and expiration date (14 bytes).

Next, the IoT lock DB 135 transmits the generated QR code for access to the service server 131 (705), and the service server 131 sends the QR code for access and the member unique value to the user terminal 15. Send (706). Alternatively, the IoT lock DB 135 may display the QR code for access on the access controller 11.

Next, the user terminal 15 scans the QR code for access (707) and transmits the scanned QR code for access and the member's unique value to the access controller 11.

When the access controller 11 is online (710), the access controller 11 requests QR code authentication for access from the IoT lock DB 135 (711). At this time, the access controller 11 can make a request by transmitting the access QR code, member unique value, and branch code together.

Next, the IoT lock DB 135 authenticates the QR code for access by 1. checking the expiration date, 2. decoding the authentication code, and confirming the member's unique value, period of use, branch code, and random value. The IoT lock DB 135 determines authentication to be successful if the current time of the access controller 11 is within the validity period. Additionally, the IoT lock DB 135 determines authentication to be successful if the transmitted member unique value, period of use, and branch code are valid. When authentication is successful in both steps 1 and 2 above, the IoT lock DB 135 transmits an authentication success message to the access controller 11 (713), and the access controller 11 opens the door (714).

Figure 8 is a diagram illustrating a door opening process through access authentication when the access controller is offline according to an embodiment of the present invention.

Referring to FIGS. 1, 7, and 8, when the access controller 11 is offline (800), that is, when power is supplied but communication is cut off, access authentication is performed using the access authentication code generation key. .

More specifically, the access controller 11 analyzes the QR code 80 for access (810), checks the validity period, and determines that authentication is successful if the current time of the access controller 11 is within the validity period. Next, the access controller 11 decrypts the authentication code using the access authentication code generation key Key_A (820) and checks the member's unique value, period of use, branch code, and random value. At this time, the access controller 11 determines that authentication is successful if the transmitted member unique value, period of use, and branch code are valid. If both steps 1 and 2 above are successful, the access controller 11 opens the door (830).

Figure 9 is a diagram illustrating a storage use process through storage authentication when an IoT lock device is online according to an embodiment of the present invention.

Referring to FIGS. 1, 2, and 9, the user terminal 15 logs into the service server 131 to use storage and requests a QR code for storage (901).

Next, the service server 131 checks the member unique value (64 bytes) in the user DB 134 (902) and requests the IoT lock DB 135 to generate a QR code for storage (903). At this time, the service server 131 may make a request while transmitting the member's unique value (64 bytes) to the IoT lock DB 135.

Then, the IoT lock DB 135 1. checks the storage authentication code, and 2. sets the expiration date. For example, the IoT lock DB 135 can set the validity period of use to 1 hour after the current time (14 byte data YYYYMMDDhhmmss). Next, the IoT lock DB 135 generates a QR code (total 48 bytes) for storage (904). The QR code for storage (total 48 bytes) includes an encrypted authentication code (32 bytes) and expiration date (14 bytes).

Subsequently, the IoT lock DB 135 transmits the generated QR code for storage to the service server 131 (905), and the service server 131 sends the QR code for storage and the member unique value to the user terminal 15. Send (906).

Next, the user terminal 15 scans the storage QR code (907) and transmits the scanned storage QR code and member unique value to the IoT lock 12.

When the IoT lock 12 is online (910), the IoT lock 12 requests QR code authentication for storage from the IoT lock DB 135 (711). At this time, the IoT lock 12 can transmit and request the QR code for storage, the member's unique value, and the branch code.

Next, the IoT lock DB 135 1. checks the expiration date, and 2. decrypts the encrypted authentication code to check the member's unique value, period of use, storage code, and random value. The IoT lock DB 135 determines that authentication is successful if the current time of the IoT lock 12 is within the validity period. Additionally, the IoT lock DB 135 determines authentication to be successful if the transmitted member unique value, period of use, and storage code are valid. When both steps 1 and 2 above are successful, the IoT lock DB 135 transmits an authentication success message to the IoT lock 12 (913), and the IoT lock 12 unlocks the storage (914).

Figure 10 is a diagram illustrating a storage use process through storage authentication when an IoT lock device is offline according to an embodiment of the present invention.

Referring to FIGS. 1, 9, and 10, when the IoT lock 12 is offline (1000), that is, when power is supplied but communication is cut off, storage authentication is performed using the storage authentication code generation key. do.

More specifically, the IoT lock 12 analyzes the storage QR code 1010 (1020), checks the validity period, and determines that authentication is successful if the current time of the IoT lock 12 is within the validity period. . Next, the IoT lock 12 decrypts the encrypted authentication code with the storage authentication code generation key Key_A0001 (1030) and confirms the member's unique value, period of use, storage code, and random value. At this time, the IoT lock 12 determines that authentication is successful if the transmitted member unique value, period of use, and storage code are valid. If both steps 1 and 2 above are successful, the IoT lock 12 unlocks the storage (1040).

As described above, the present invention can improve security by enabling field access and storage use through authentication code management. For example, security can be improved by generating an encrypted authentication code using an authentication code generation key and performing access authentication and storage authentication using the authentication code.

Additionally, the present invention improves convenience in membership registration, service application, and use. For example, by converting the encrypted authentication code into a QR code to perform access authentication and storage authentication, users can conveniently use unmanned self-storage services using the QR code.

So far, the present invention has been examined focusing on its embodiments. A person skilled in the art to which the present invention pertains will understand that the present invention can be implemented in a modified form without departing from the essential characteristics of the present invention. Therefore, the disclosed embodiments should be considered from an illustrative rather than a restrictive perspective. The scope of the present invention is indicated in the claims rather than the foregoing description, and all differences within the equivalent scope should be construed as being included in the present invention.

1: Unmanned self-storage system
11: Access controller
12: IoT lock
13: Integrated server
131: Service server
132: Management server
133: Authentication server
134: User DB
135: IoT lock DB
14: Administrator terminal
15: user terminal
16: Storage

Claims (13)

At the request of the administrator terminal, the integrated server generates and stores the access authentication code generation key and the storage authentication code generation key, transmits the access authentication code generation key to the access controller for opening the door, and uses the storage authentication code generation key to lock the storage. Service preparation step, sending to IoT lock for unlocking;
According to the user terminal's request for membership registration, the integrated server generates a unique member value and processes the membership, and according to the user terminal's service request, the integrated server generates an encrypted access authentication code using the access authentication code generation key and a storage authentication code. Membership registration and service application steps of generating an encrypted storage authentication code using the generation key;
A door opening step in which the integrated server converts the encrypted access authentication code into a QR code for access and performs access authentication in response to a door opening request from a user terminal that has registered for membership and applied for service; and
A storage use step in which the integrated server converts the encrypted storage authentication code into a storage QR code to perform storage authentication in response to a storage use request from the user terminal after opening the door,
Membership registration and service application steps are:
Generate an access authentication code containing the branch code of the access controller, generate a storage authentication code containing the storage code of the IoT lock, and
The door opening steps are
If the access controller is online, the integrated server performs access authentication through QR code authentication at the request of the access controller. If the access controller is offline, access authentication is performed using the access authentication code generation key stored in the access controller. Perform,
Storage usage steps are:
If the IoT lock is online, the integrated server performs storage authentication through QR code authentication for storage at the request of the IoT lock. If the IoT lock is offline, the authentication code generation key for storage stored in the IoT lock is used. An unmanned self-storage service method characterized by performing storage authentication using an unmanned self-storage service method.
According to claim 1,
The access authentication code generation key is a key to encrypt the access authentication code required when the user requests to open the door through the access controller installed at the service point.
An unmanned self-storage service method characterized in that the storage authentication code generation key is a key to encrypt the storage authentication code required when the user requests storage use through an IoT lock within the service point.
The method of claim 1, wherein the service preparation step is
A management server authenticating an administrator according to a request from the administrator terminal;
If authentication is successful, the administrator terminal selects a service point by administrator input and requests key generation to the authentication server through the management server;
A step where the authentication server generates an access authentication code generation key and each storage authentication code generation key and stores them in the IoT lock DB;
The authentication server transmits the access authentication code generation key to the access controller and transmits each storage authentication code generation key to each IoT lock; and
The authentication server transmitting a key creation response message to the administrator terminal through the management server;
An unmanned self-storage service method comprising:
According to claim 1, the membership registration and service application steps are
A user terminal requesting membership registration from a service server;
After the service server generates a member's unique value and processes the member registration, mapping the member ID and unique value and storing it in the user DB;
After registering as a member, the user terminal requests a service application from the service server including selection information about the service point, storage size, and usage period;
The service server checks the member's unique value stored in the user DB, and requests the authentication server to generate an authentication code along with the service point, storage size, period of use, and member's unique value information;
A step where the authentication server checks the access authentication code generation key of the service point stored in the IoT lock DB and the corresponding storage authentication code generation key;
Generating an access authentication code using an access authentication code generation key; and
Generating a storage authentication code using the corresponding storage authentication code generation key;
An unmanned self-storage service method comprising:
The method of claim 4, wherein the step of generating the access authentication code is
A step of the authentication server generating data for an access authentication code to generate an access authentication code; and
Generating an encrypted access authentication code as the authentication server encrypts data for the access authentication code using an access authentication code generation key; Includes,
An unmanned self-storage service method characterized in that the data for the access authentication code includes member unique value, period of use, branch code, and random value information.
The method of claim 4, wherein the step of generating a storage authentication code is
An authentication server generating data for a storage authentication code to generate a storage authentication code; and
Generating an encrypted storage authentication code as the authentication server encrypts data for the storage authentication code using a storage authentication code generation key; Includes,
An unmanned self-storage service method wherein the data for the storage authentication code includes member unique value, period of use, storage code, and random value information.
The method of claim 1, wherein the door opening step is
A user terminal requesting a QR code for access from the service server;
The service server checks the member's unique value in the user DB and requests the IoT lock DB to generate a QR code for access;
IoT lock DB checks the access authentication code, sets the access validity period, and then generates a QR code for access including the access authentication code and the access validity period;
Transmitting the QR code for access in which the IoT lock DB is created to the user terminal through the service server, or displaying the QR code for access on the access controller; and
A step where the user terminal scans the QR code for access and transmits the scanned QR code for access and the member's unique value to the access controller;
An unmanned self-storage service method comprising:
The method of claim 7, wherein the door opening step is
When the access controller is online, the access controller requests QR code authentication for access from the IoT lock DB;
IoT lock DB checks the expiration date, decrypts the encrypted authentication code, and authenticates the QR code for access; and
When authentication is successful, the IoT lock DB transmits an authentication success message to the access controller, and the access controller opens the door;
An unmanned self-storage service method further comprising:
The method of claim 7, wherein the door opening step is
If the access controller is offline, the access controller analyzes the QR code for access and checks the expiration date;
If the current time of the access controller is within the validity period, the access controller performs authentication by decrypting the authentication code with an access authentication code generation key; and
When authentication is successful, the access controller opens the door;
An unmanned self-storage service method further comprising:
The method of claim 1, wherein the storage use step is
A user terminal requesting a QR code for storage from the service server;
The service server checks the member's unique value in the user DB and requests the IoT lock DB to generate a QR code for storage;
IoT lock DB checks the storage authentication code, sets the access validity period, and then generates a QR code for storage including the access authentication code and the access validity period;
Transmitting the QR code for storage in which the IoT lock DB is created to the user terminal through the service server; and
A user terminal scanning a storage QR code and transmitting the scanned storage QR code and member unique value to the access controller;
An unmanned self-storage service method comprising:
The method of claim 10, wherein the storage use step is
When the IoT lock is online, the IoT lock requests QR code authentication for storage from the IoT lock DB;
IoT lock DB checks the expiration date, decrypts the encrypted authentication code, and authenticates the QR code for storage; and
When authentication is successful, the IoT lock DB transmits an authentication success message to the IoT lock, and the IoT lock unlocks the storage;
An unmanned self-storage service method further comprising:
The method of claim 10, wherein the storage use step is
If the IoT lock is offline, the IoT lock analyzes the QR code for storage to check the expiration date;
If the current time of the IoT lock device is within the validity period, the IoT lock device performs authentication by decrypting the authentication code with a storage authentication code generation key; and
Upon successful authentication, the IoT lock device unlocks the storage;
An unmanned self-storage service method further comprising:
Administrator terminal for managing service users;
A user terminal that requests membership registration and service application, as well as opening doors and using storage;
At the request of the administrator terminal, the access authentication code generation key and storage authentication code generation key are generated and stored, the access authentication code generation key is transmitted to the access controller, the storage authentication code generation key is transmitted to the IoT lock, and the user terminal According to the member registration request, a unique member value is created and registered, an encrypted access authentication code is generated using the access authentication code generation key according to the service application of the user terminal, and an encrypted storage is used using the storage authentication code generation key. Generates an authentication code, performs access authentication by converting the encrypted access authentication code into a QR code for access according to the door opening request of the user terminal who signed up for membership and applied for the service, and performs access authentication according to the storage use request of the user terminal after opening the door. An integrated server that performs storage authentication by converting the encrypted storage authentication code into a QR code for storage;
An access controller that opens the door according to access authentication; and
Includes an IoT lock that unlocks the storage according to storage authentication,
The integrated server is
Generate an access authentication code containing the branch code of the access controller, generate a storage authentication code containing the storage code of the IoT lock, and
If the access controller is online, the integrated server performs access authentication through QR code authentication at the request of the access controller. If the access controller is offline, access authentication is performed using the access authentication code generation key stored in the access controller. Perform,
If the IoT lock is online, the integrated server performs storage authentication through QR code authentication for storage at the request of the IoT lock. If the IoT lock is offline, the authentication code generation key for storage stored in the IoT lock is used. An unmanned self-storage system characterized in that storage authentication is performed using an unmanned self-storage system.

Images