KR20090062903A - Security Management System and Method using Mobile Communication Terminal with Universal Subscriber Identity Module - Google Patents

Abstract

The present invention relates to a security management system and method using a mobile communication terminal equipped with a universal subscriber identity module.

The present invention provides an automatic lock (external communication function, for a function that allows data leakage of the mobile communication terminal when entering or exiting a security company such as a company or a factory) using a universal subscriber identity module mounted on the mobile communication terminal. Provides a method of implementing data storage and camera functions (including video calls).

The present invention can be expected to be effective in preventing the enormous loss due to security leakage using a mobile communication terminal at the same time as the facility access management using the universal subscriber identification module.

Description

Security management system and method using mobile communication terminal equipped with universal subscriber identity module {Apparatus and Method for Managing Security Mobile Communication Terminal with Universal Subscriber Identity Module}

The present invention relates to a security system and method using a mobile communication terminal, and more particularly to a security management system and method using a mobile communication terminal equipped with a subscriber authentication module.

Currently used mobile communication terminals have been added with various additional functions as the communication speed is improved, the internal memory and the processing speed are increased. These additional functions include camera functions, MP3 functions, recording and data storage functions, and the like.

These additional functions use functions that are more convenient for users of mobile communication terminals, but leakage of information requiring security may occur due to unauthorized use in areas requiring security such as corporate research centers, trade fairs, and military facilities.

Conventional security method for solving this problem, when entering the security area with the mobile terminal, the mobile terminal is prohibited to carry or block some functions of the mobile terminal by operating a special key of the mobile terminal. Or limited.

However, this security method is that when the user enters the security area, the access control time is delayed due to the recovery time of the mobile terminal, and when the user uses a special function key of the mobile terminal, some functions of the mobile terminal are blocked / There was a problem that was not limited.

In order to solve this problem, the present invention is to provide a security management system and method using a mobile communication terminal equipped with a universal subscriber identity module.

Security management method using a mobile communication terminal equipped with a universal subscriber identity module according to a feature of the present invention for achieving the technical problem (a) when the mobile communication terminal communicates with the entry and exit reader for access to the security area, Receiving employee ID access ID information from the mobile communication terminal; (b) comparing the employee ID access ID information with a pre-stored employee ID ID to determine whether an entry validity period corresponding to the employee ID access ID information exceeds a current date; (c) Security function lock signal when the employee ID access ID information and the previously stored employee ID ID do not exceed the current date. The security function lock signal is a data storage function other than a voice call, an external communication function. And means information for blocking a camera function and transmitting the generated information to the mobile communication terminal. (d) checking the employee ID and the validity period of time by receiving the second employee ID access ID information of the first mobile communication terminal when the mobile communication terminal communicates with the entrance reader for exit from the security area; ; And (e) the data storing function blocked by generating a security function release signal and transmitting the generated security function release signal to the mobile communication terminal when the second employee ID access ID information matches the employee ID ID and the access valid period does not exceed the current date. And releasing the external communication function and the camera function.

A security management system using a mobile communication terminal equipped with a universal subscriber identity module according to an aspect of the present invention receives employee ID access ID information from a first mobile communication terminal equipped with a subscriber authentication module entering a security area, and stores the employee ID ID. Compare with, and confirm that the access valid period corresponding to the employee ID access ID information exceeds the current date to generate a security function lock signal that blocks data storage, external communication, and camera functions other than voice calls. An entry / exit reader for transmitting to the first mobile communication terminal; And receiving the second employee ID access ID information from the first mobile communication terminal outside the security area, checking the employee ID and the validity period of the employee ID, and then releasing the data storage function, the external communication function, and the camera function. And a gate access reader for generating a security function release signal and transmitting it to the first mobile communication terminal.

With the above-described configuration, the present invention can expect the effect of simplifying the access ID issuing process and enhancing access security.

The present invention can be expected to be effective in preventing the enormous loss due to security leakage using a mobile communication terminal at the same time as the facility access management using the universal subscriber identification module.

The present invention can be expected to reduce the inconvenience of the conventional access card issuing waiting time and the receipt of the card because the access ID issuance process is made in communication.

The present invention can be expected to block the leakage of information through the mobile communication terminal is becoming a large capacity and high performance.

According to the present invention, time and attendance management such as employee attendance and commute management can be performed with access authentication information using the universal subscriber identification module.

The present invention has the advantage that it can be applied to any mobile communication terminal only if the universal subscriber identity module.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is said to "include" a certain component, it means that it can further include other components, without excluding other components unless specifically stated otherwise. In addition, the terms “… unit”, “… unit”, “module”, “block”, etc. described in the specification mean a unit that processes at least one function or operation, which is hardware or software or a combination of hardware and software. It can be implemented as.

An embodiment of the present invention uses a universal subscriber identity module (hereinafter referred to as "USIM") mounted on the mobile communication terminal 100 when entering and exiting a mobile communication terminal 100 of a company or factory where security is important. Provides a method of implementing automatic locking (external communication function, data storage function, camera function (including video call)) for a function that can leak data.

1 is a diagram schematically illustrating a configuration of a security management system using a mobile communication terminal 100 equipped with a USIM 110 according to an embodiment of the present invention.

The mobile communication terminal 100 equipped with the USIM 110 connects to a mobile communication company server (not shown) through a mobile communication network or an internet network, generates an ID application message including the approval details, and transmits the generated ID application message to the mobile communication company server. Here, the approval details include personal information, a mobile communication terminal model, and a phone number.

The mobile telecommunication company server generates a text message including a uniform resource locator (URL) for downloading an access authentication ID and transmits the text message to the mobile telecommunication terminal 100.

The mobile communication terminal 100 accesses the program download site for the access authentication ID through the Internet network, checks the name of the mobile phone, the model, the telephone number, and the like, and downloads and installs the program for the access authentication ID. At this time, since the mobile communication terminal 100 varies according to the type of the terminal, it is necessary to select and install an access authentication ID program suitable for the type of the terminal.

Subsequently, the mobile communication terminal 100 in which the access authentication ID program is activated is connected to an employee ID system server (not shown) through an ID issuing terminal device for the USIM 110 to receive an access authentication ID and store it in the USIM 110. do. Here, the ID issuing terminal device for the USIM 110 is a built-in access authentication ID issuance program.

Here, the USIM 110 includes mobile communication terminal information, and the mobile communication terminal information includes an access authentication ID, an access validity period, a terminal serial number (ESN), and a terminal telephone number.

The security management system using the mobile communication terminal 100 equipped with the USIM 110 according to the embodiment of the present invention includes an entry / exit reader 200 and an entry / exit reader 300.

The entry / exit reader 200 receives the employee ID USIM ID information from the mobile communication terminal 100 and checks the entry validity period corresponding to the employee ID USIM ID information when the employee ID ID matching the received employee ID USIM ID information exists. Afterwards, a security function lock signal is generated and transmitted to the mobile communication terminal 100.

Here, the security function lock signal indicates information for blocking data storage functions (memory and camera) and external communication functions (cable connection, Internet, Bluetooth, infrared, etc.) of the mobile communication terminal 100 except for a voice call function. Consists of code. This may be any random number, but may be cryptographic information generated by a special cryptographic algorithm.

Outgoing entrance reader 300 receives the employee ID USIM ID information from the mobile communication terminal 100, and if there is an employee ID ID that matches the received employee ID USIM ID information, the access reader 300 corresponding to the employee ID USIM ID information After checking, a security function release signal is generated and transmitted to the mobile communication terminal 100.

Here, the security function release signal is composed of a code indicating information for automatically switching the function of the mobile communication terminal 100 to the state before the entry into the security area.

The USIM 110 receives the security function lock signal and the security function release signal and requests the lock or release of the security function of the mobile communication terminal 100 to the operating system of the mobile communication terminal 100. Accordingly, the mobile communication terminal 100 blocks the data storage function, the external communication function and the camera function according to the security function lock signal, and releases the functions of the mobile communication terminal 100 blocked according to the security function release signal.

Next, a security management method using the mobile communication terminal 100 equipped with the USIM 110 will be described in detail with reference to FIG. 2.

2 is a view for explaining a security management method using a mobile communication terminal 100 equipped with a USIM 110 according to an embodiment of the present invention.

When the mobile communication terminal 100 communicates with the entry / exit reader 200 through a contactless short-range wireless communication method to enter the security area, the mobile terminal 100 generates employee ID USIM ID information and transmits it to the entry / exit reader 200 (S100). ).

The entry / exit reader 200 compares the employee ID USIM ID information received from the mobile communication terminal 100 with the previously stored employee ID ID, and then checks the entry validity period corresponding to the employee ID USIM ID information (S102).

Introductory access reader 200 succeeds in access authentication if the received employee ID USIM ID information and the pre-stored employee ID ID matches, if the access valid period exceeds the current date, access authentication fails and does not exceed the current date.

The entry / exit reader 200 may display a warning message indicating that the entry validity period has not passed or the entry authentication has not been performed when the entry validity period has passed or the employee ID USIM ID information is not already stored. To transmit (S104).

Introductory access reader 200 is a mobile terminal by generating a pre-stored security function lock signal, if the employee ID USIM ID information and the pre-stored employee ID ID matches, and the validity period of access corresponding to the employee ID USIM ID information does not exceed the current date Transmit to 100 (S106).

The mobile communication terminal 100 blocks data storage, a camera and an external communication function in the security area according to the security function lock signal, generates a security function lock success signal, and transmits the generated security function lock signal to the entry / exit reader 200 (S108).

Subsequently, the entry / exit reader 200 generates an entrance authentication permission signal and transmits it to the mobile communication terminal 100 and releases the lock state of the entry device (S108).

Subsequently, when the mobile communication terminal 100 communicates with the door access reader 300 to escape the security area, the door access reader 300 compares the received employee ID USIM ID information with previously stored employee ID ID, The access valid period corresponding to the employee ID card USIM ID information is checked from the mobile communication terminal 100 (S110).

When the received employee ID USIM ID information and pre-stored employee ID ID match, the door access reader 300 succeeds in access authentication if the access valid period exceeds the current date and the access authentication fails and does not exceed the current date.

When the access validity period of the door access reader 300 has passed the validity period of the entrance or when the employee ID USIM ID information does not match, the mobile terminal 100 displays a warning message indicating that the entrance validity period has not passed or the authentication has not been performed. And transmit (S112).

Outgoing access reader 300 generates a warning control signal to check whether the mobile communication terminal 100 is used when the access authentication fails, and transmits it to the security management server (S114).

Accordingly, the administrator may determine the ineligibility of the security by recovering the mobile communication terminal 100 and confirming the use of photographing, data transmission, infrared communication, and the like.

Outgoing entrance reader 300 when the employee ID USIM ID information and the pre-stored employee ID ID matches, and the validity period of access corresponding to the employee ID USIM ID information does not exceed the current date, generates a pre-stored security function release signal for mobile communication It transmits to the terminal 100 (S116).

The mobile communication terminal 100 releases the data storage, camera, and external communication functions that were blocked in the security area according to the security function release signal, generates a security function release success signal, and transmits the signal to the entrance / exit reader 300 (S118). ).

Subsequently, the entrance and exit reader 300 generates an entrance authentication permission signal, transmits the entrance authentication permission signal to the mobile communication terminal 100, and releases the locked state of the entrance device (S118).

As another method, the mobile communication terminal 100 transmits the employee ID USIM ID information to the entry / exit reader 200 or the entry / exit reader 300.

The entry / exit reader 200 or the entry / exit reader 300 generates a security function lock signal or a security function release signal to be transmitted to the mobile communication terminal 100 when the employee ID USIM ID information is compared with the previously stored password. It can also unlock the entry or exit device.

The embodiment of the present invention describes that the USIM 110 is mounted on the mobile communication terminal 100, but any subscriber authentication module capable of storing and inputting / outputting mobile communication terminal information including employee ID USIM ID information may be used. Do.

The embodiments of the present invention described above are not implemented only by the apparatus and / or method, but may be implemented through a program for realizing a function corresponding to the configuration of the embodiments of the present invention, a recording medium on which the program is recorded, and the like. Such implementations may be readily implemented by those skilled in the art from the description of the above-described embodiments.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

1 is a diagram schematically illustrating a configuration of a security management system using a mobile communication terminal equipped with a universal subscriber identity module (hereinafter referred to as USIM) according to an embodiment of the present invention.

2 is a view for explaining a security management method using a mobile communication terminal equipped with a USIM according to an embodiment of the present invention.

Claims (6)

In the security management method using a mobile terminal, (a) receiving the employee ID access ID information from the mobile communication terminal when the mobile communication terminal communicates with an entry / exit reader for entry into a secure area; (b) comparing the employee ID access ID information with a pre-stored employee ID ID to determine whether an entry validity period corresponding to the employee ID access ID information exceeds a current date; (c) Security function lock signal when the employee ID access ID information and the previously stored employee ID ID do not exceed the current date. The security function lock signal is a data storage function other than a voice call, an external communication function. And means information for blocking a camera function and transmitting the generated information to the mobile communication terminal. (d) checking the employee ID and the validity period of time by receiving the second employee ID access ID information of the first mobile communication terminal when the mobile communication terminal communicates with the entrance reader for exit from the security area; ; And (e) the data storage function blocked by generating a security function release signal and transmitting it to the mobile communication terminal when the second employee ID access ID information and the employee ID ID coincide with the access valid period not exceeding the current date; Canceling the external communication function and the camera function Security management method comprising a. According to claim 1, In step (b) and step (d), Generating an access authentication failure signal to the mobile communication terminal when the employee ID access ID information and the second employee ID access ID information do not coincide with the ID card ID or exceed the access validity period; Security management method further comprising. In the security management system using a mobile communication terminal, Receive employee ID access ID information from a first mobile communication terminal equipped with a subscriber authentication module entering a security area and compare it with previously stored employee ID IDs. An entry / exit reader for generating a security function lock signal for blocking a data storage function, an external communication function, and a camera function other than a voice call and transmitting the same to the first mobile terminal; And Security to release the data storage function, the external communication function and the camera function after receiving the second employee ID access ID information from the first mobile communication terminal outside the security area and checking the employee ID ID and the access valid period. A door access reader for generating a function release signal and transmitting it to the first mobile communication terminal Security management system comprising a. The method of claim 3, wherein The entry / exit reader or the entry / exit reader, When the employee ID access ID information and the second employee ID access ID information compare and match a previously stored password, the security function lock signal or the security function release signal is generated and transmitted to the first mobile communication terminal. Security management system. The method according to claim 3 or 4, The subscriber authentication module includes at least one of the employee ID access ID information, the second employee ID access ID information, the access valid period, a terminal serial number (ESN), and a terminal phone number. The method according to claim 3 or 4, The first mobile communication terminal downloads a program for access authentication ID through a mobile communication company server, receives the employee ID access ID information or the second employee ID access ID information through an ID issuing device, and stores the received ID information in the subscriber authentication module. Characterized by a security management system.

Images