KR20100063156A - A mobile terminal for open-close door lock and key management server and method for managing key using mobile terminal - Google Patents

Abstract

PURPOSE: A key managing method using a mobile communication terminal for a door lock opening and closing, a key managing server and a mobile communications terminal is provided to safely transfer a master key by applying an encryption algorithm to the master key. CONSTITUTION: A storage(201) stores a master key for opening and closing a door lock through a wireless network. A key generation unit(202) generates a child key corresponding to the master key according to a key request of an arbitrary mobile communication terminal through the wireless network. A key supplying unit(203) supplies the child key generated from the key generation unit to the arbitrary mobile communication terminal through the wireless network. The master key is saved to the storage through a secure channel between the wireless network and the mobile communications terminal. A decoder(204) decodes the master key which is secured by using a PKI mode using a user certificate.

Description

A MOBILE TERMINAL FOR OPEN-CLOSE DOOR LOCK AND KEY MANAGEMENT SERVER AND METHOD FOR MANAGING KEY USING MOBILE TERMINAL}

The present invention relates to a door lock opening and closing control, and more particularly, a child key corresponding to the master key at the request of any mobile communication terminal after storing a plurality of master keys that can control the opening and closing of the door lock in the mobile communication terminal The present invention relates to a mobile communication terminal for opening and closing a door lock, a key management server, and a key management method using a mobile communication terminal that can be generated and provided to any mobile communication terminal.

Various kinds of technologies have recently been developed, in which door lock devices for offices, rooms, apartments, etc., and door opening and closing systems for automobiles, etc., use a metal key. For example, if a password is entered, the password is validated and various types, such as equipment for opening the door through electromechanical operation, biometric information such as fingerprint, iris, and voice, etc., for checking the right to open the door. Taean techniques have been proposed.

In recent years, as the use of mobile communication terminals has become more common, door opening and closing systems using mobile communication terminals have emerged. For example, a method of opening and closing a door after confirming an identity using a mobile communication terminal, a method of implementing a door lock system using a radio frequency signal of the mobile communication terminal, and the like.

Hereinafter, a door opening and closing system using a conventional mobile communication terminal will be described with reference to the accompanying drawings.

As shown in FIG. 1, the mobile phone 100 periodically stores a MIN (Mobile Identification Number or Phone Number) and an ESN (Electronic Serial Number) stored in the mobile phone 100. The door opening and closing system 120 is configured to receive and transmit this information by the mobile phone 100 using wireless communication, for example, an infrared communication such as an IrDA transceiver, to the door opening and closing system 120 to open and lock the locking device. . Here, the data transmission and reception between the mobile phone 100 and the door opening and closing system 120 is made through the infrared communication means 110, the mobile phone 100 is not only an IrDA transceiver but also a display unit, key input unit, fingerprint recognition unit, control unit, etc. The door lock opening and closing system 120 includes a controller, a memory, a lock device controller, and the like as well as an IrDA transceiver.

The access confirmation system or the door opening / closing system 120 using the conventional mobile communication terminal uses the MIN and ESN signals generated periodically by the mobile phone 100 to indicate that the mobile phone 100 is present in a nearby area. Recognize the fact and enter standby.

Secondly, when a user sends a password over the air, the lock opens and locks.

Locking device using a conventional mobile phone having the above configuration has a problem that is vulnerable to replication. In the situation where the use of the duplicated cell phone is a problem, the cell phone has a problem that the person holding the duplicated cell phone can easily control the door opening and closing system.

In addition, the identification system interface using a mobile phone is used for the door opening and closing system using the RF technology of the CDMA, there is a problem that is difficult to use when the system of the mobile communication service provider is advanced. In other words, the analog mobile phones that were used in the past are no longer in service at present, and when the current PCS and cellular telephone service providers service only new systems different from the current according to technology development, they are used for door opening and closing systems. Mobile phones and locks also have to be replaced.

In addition, the door opening and closing system using the conventional mobile communication terminal may cause a risk due to information leakage when considering the characteristics of the mobile phone and the communication range. That is, the CDMA code should be synchronized between the mobile phone and the wireless telephone relay station, and this code is designed to prevent eavesdropping and eavesdropping on other equipment. When the door opening system is used, the information is transmitted to the door opening system. In this process, there is a problem that the risk of information leakage may occur. Meanwhile, the conventional digital door opening and closing system using a password includes a key input device in the door opening and closing system, and a user inputs a password through the key input device to control the door opening and closing device. There must be a separate key input device, there is a problem that another person can easily control the lock device when the password is exposed. In addition, a door opening and closing system having a biometric function has a problem of having an expensive biometric reader.

The door opening and closing system using a conventional mobile communication terminal has a problem that a person possessing a duplicated mobile communication terminal can easily control the opening and closing of a door when the mobile communication terminal is duplicated in a situation where a duplicated mobile communication terminal is a problem. That is, there is a vulnerability in security.

In addition, since the door opening and closing system using the conventional mobile communication terminal can only control the opening and closing of the user having a mobile communication terminal, a user who can arbitrarily open and close the door can not open or close the door. There is a problem to wait only to come.

The present invention transmits the master key that can control the opening and closing of the door lock by applying an encryption algorithm, which not only securely transfers the master key but also transfers the master key to the mobile communication terminal of the user desired by the user of the master mobile communication terminal. .

The mobile communication terminal of the present invention includes a storage unit for receiving and storing a master key for opening and closing a door lock through a wireless communication network, and a child corresponding to the master key according to a key request of an arbitrary mobile communication terminal through the wireless communication network. A key generating unit for generating a key, and a key providing unit for providing a child key generated by the key generating unit to the arbitrary mobile communication terminal via the wireless communication network.

In addition, the key management server according to the present invention, the user authentication unit for performing the user authentication for the master mobile communication terminal and the key request mobile communication terminal connected via a wireless communication network, and the mobile communication terminal authenticated through the user authentication unit An encryption unit for encrypting and transmitting a master key to be transmitted to the authenticated mobile communication terminal, and receiving a key request message from the key request mobile terminal connected through the wireless communication network, and moving the master according to the key request message. And a key request processing unit for requesting a key from a communication terminal, and a child key transmission unit receiving a child key corresponding to the master key from the master mobile communication terminal receiving the key request and transmitting the received child key to the key requesting mobile communication terminal.

The key management method using a mobile communication terminal according to the present invention comprises the steps of registering a master key in a master mobile communication terminal, and encrypting the master key as a key request of a key request mobile communication terminal is received through a wireless communication network. Generating a key, and transmitting the generated child key to the key requesting mobile terminal through the wireless communication network.

The present invention has the effect of transmitting the master key to the user's mobile communication terminal by applying an encryption algorithm to control the door lock opening and closing, thereby securely delivering the master key.

In addition, the present invention can generate a child key using the master key for opening and closing the door lock, and then transmit it to the mobile communication terminal of any other user, thereby preventing the exposure of the master key by hacking and of the user. There is an advantage that the key for securely opening and closing the door lock to another user who wants can enhance the user's convenience.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

2 is a block diagram illustrating a door opening and closing system using a mobile communication terminal according to an exemplary embodiment of the present invention.

As shown in Figure 2, the door opening and closing system according to an embodiment of the present invention, the master mobile communication terminal 200, mobile communication network 205, key management server 210, authorized authentication server 220, gateway 230, a key request mobile communication terminal 240.

The master mobile communication terminal 200 stores a master key and generates a storage key 201, a key generator 202, a key provider 203, and a decoder 204 to generate a child key corresponding to the stored master key. ).

The master mobile communication terminal 200 and the key request mobile communication terminal 240 are connected to the mobile communication network 200 to provide a voice call function for performing a normal voice call by wireless communication with different mobile communication terminals. As a means of using a message service function, a wireless Internet function, a game service, etc. to create and transmit a message, for example, an SMS message, an MMS message service, etc. using the provided text writing function, a PDA (Personal Digital Assistant), PCS (Personal Communication) Service (GPS) phone, Global System for Mobile (GSM) phone, Wideband CDMA (W-CDMA) phone, CDMA-2000 phone, Mobile Broadband System (MBS) phone, Digital Multimedia Broadcasting (DMB) phone and the like.

The master mobile communication terminal 200 stores a master key for controlling the opening and closing of the door lock in the storage unit 201, and the master key is received from the key management server 210 to store the master mobile communication terminal 200. Stored in the unit 201.

After the user of the master mobile communication terminal 200 accesses the key management server 210 through a wireless communication network and undergoes a user authentication process, the user receives the corresponding master key from the key management server 210. In the user authentication process, there is a method using a user ID / password method or a public certificate. The method of using a public certificate is a method of authenticating using a public certificate of a user stored in the master mobile communication terminal 200, and is the same as a conventional public authentication method.

The master key is transmitted to the master mobile communication terminal 200 through a secure channel such as TLS or SSL, or in the case of using a public certificate, it is secured in a PKI manner and transmitted to the master terminal 200.

The method of securing the master key using the PKI method is largely used in the case of using RSA and the Diffie-Hellman method. In the case of using the RSA, the public key is extracted from the public certificate stored in the master mobile communication terminal 200, the RSA encryption operation is performed with the public key, the master key is encrypted, and the encrypted master key is provided to the master mobile communication terminal 200. In the case of using the Diffie-Hellman method, the Diffie-Hellman encryption is performed using the public key extracted from the public certificate stored in the master mobile communication terminal 200 and the private key extracted from the certificate of the key management server 2100 to obtain the master key. Encrypting and providing the encrypted master key to the master mobile communication terminal 200.

In the case of the Diffie-Helban method, the decryption unit 204 of the master mobile communication terminal 200 decrypts the master key encrypted by using the public key of the key management server 210 and the private key of the user's public certificate. Extract the data and store it in the storage unit 201, and in the case of using the RSA method, decode the encrypted master key by using the private key stored in the master mobile communication terminal 200, extract the master key, and then store it. Store in

The master key may be stored in a storage medium such as a memory in the master mobile communication terminal 200 or may be stored in an IC card embedded in the master mobile communication terminal 200.

In the present invention has been described as an example that the master key is provided from the key management server 210 connected through the wireless communication network 205, but in the case of the master key for opening and closing the door lock of the private home when the door lock is initially set The master key stored in the door lock may be received and stored in the master mobile communication terminal 200 through a short range communication interface between the mobile communication terminal 200 and the door lock, such as RF communication, infrared communication, and Bluetooth communication.

In the storage unit 201 of the master mobile communication terminal 200, as shown in FIG. 3, a plurality of master keys M1, M2, M3, ..... may be stored, and each master key may have a different Service IDs (Service ID1, Service ID2, Service ID3, ...) and different key IDs (Key ID1, Key ID2, Key ID3, ...) are set. That is, the storage unit 201 of the master mobile communication terminal 200 may store a plurality of master keys for controlling the opening and closing of door locks installed in different places such as homes, offices, schools, and academies.

The master mobile communication terminal 200 may access the corresponding key management server 210 using the service ID, and the key ID corresponding to the corresponding service ID when the key management server 210 corresponding to the corresponding service ID is connected. Has a master key.

The key generation unit 202 of the master mobile communication terminal 200 generates a child key corresponding to the master key according to the key request of the key management server 210 and transmits it to the key management server 210. As a method for generating a child key, a child key is generated by encrypting a master key using a public key of a public certificate stored in the requesting mobile communication terminal 240 and a private key of a public certificate stored in the master mobile communication terminal 200. . The child key is transmitted to the key management server 210 together with the public key of the public certificate stored in the master mobile communication terminal 200.

This child key is generated by a one way hash function, that is, the public key of the public certificate stored in the requesting mobile terminal 240 and the private key and master of the public certificate stored in the master mobile terminal 200. By applying the key to the hash function, an encrypted master key, or child key, is generated.

When the one-way hash function is applied, the key generation unit 202 of the master mobile communication terminal 200 provides an interface for setting use restriction information of child keys, and a user of the master mobile communication terminal 200 inputs the interface. The validity period of the child key is set based on the usage restriction information. The input restriction information may be a date, a time count, or the like.

The wireless communication network 205 may include not only a CDMA network but also a GSM network and a network of a fourth generation mobile communication system to be implemented. The wireless communication network 205 includes a key management server 210 and a master mobile communication terminal 200. Mobile communication switching center for interworking.

In the case of IS-95A / B / C systems, the mobile switching center has an access switching subsystem (ASS) that performs distributed call processing, an interconnection network subsystem (INS) that performs centralized call processing, and centralizes operation and maintenance. It includes a subsystem such as a Central Control Subsystem (CCS) in charge of functions, and a Location Registration Subsystem (LRS) for storing and managing information on mobile subscribers.

In addition, mobile communication switching centers for third and fourth generations may include an Asynchronous Transfer Mode (ATM) switch.

The key management server 210 is a means for providing a master key and a child key provided from the master mobile communication terminal 200 according to a key request of the requesting mobile communication terminal 240. For example, an office management system, a building management system, And a server managed by an access control system or the like. The key management server 210 includes a user authentication unit 211 for performing user authentication on the master mobile communication terminal 200 and the request mobile communication terminal 240 connected through the wireless communication network 205, and a user authentication unit. An encryption unit 212 for encrypting the master key to be transmitted to the authenticated mobile communication terminal through 211 and transmitting it to the authenticated mobile communication terminal, and a key request mobile communication terminal 240 connected through the wireless communication network 205. A key request message from the key request processing unit 213 for requesting a key to the master mobile communication terminal 200 according to the key request message, and a master key from the master mobile communication terminal 200 receiving the key request. And a child key transmitter 214 for receiving the child key and transmitting the received child key to the request mobile communication terminal 240.

The key request processing unit 213 of the key management server 210 receives a key request of an arbitrary mobile communication terminal, that is, the request mobile communication terminal 240, and receives a public key from the request mobile communication terminal 240 when the key request is received. After receiving it and encrypting it with its own private key, it transmits it to the master mobile communication terminal 200. At this time, the child key is provided to the requesting mobile communication terminal 240 in the form of an MMS or SMS message.

The authorized authentication server 230 transmits and receives information for user authentication in association with the key management server 210.

The requesting mobile communication terminal 240 connects to the key management server 210 through the wireless communication network 205 and requests a key for controlling the opening and closing of the door lock using its public key, and the child key accordingly. It is provided from the key management server 210.

The requesting mobile communication terminal 240 is a key encrypted with a one-way hash function, that is, a public key contained in its private key and the encrypted child key, that is, a public key of a public certificate in the master mobile communication terminal 200. Decryption using a key to extract the key, the user of the request mobile communication terminal 240 may control the opening and closing of the door lock with the extracted key.

A process of operating the door lock opening and closing system having the above configuration will be described with reference to FIG. 4.

4 is a flowchart illustrating a key management method using a mobile communication terminal according to an exemplary embodiment of the present invention.

Referring to FIG. 4, the user of the master mobile communication terminal 200 accesses the key management server 210 through the wireless communication network 205 and then undergoes a user authentication process (S400). That is, a user of the master mobile communication terminal 200 logs in to the key management server 210 by inputting his / her ID and password or requests a master key after accessing the key management server 210 using his / her public certificate. (S402).

Upon request of the master key, the key management server 210 encrypts the master key in a PKI manner and transmits the master key to the master mobile communication terminal 200 or transmits the master key to the master mobile communication terminal 200 in a secure channel such as TSL / SSL. send. In this case, the master key includes a key ID for identifying the master key and a service ID of the key management server 210.

When the received master key is encrypted, the master mobile communication terminal 200 decrypts the encrypted master key using the decryption unit 204 and stores the encrypted master key in the storage unit 201 and receives the master key received through a secure channel. It is stored in the storage unit 201 (S404).

Then, the key management server 210 receives a key request message when a key request S406 is received from any mobile communication terminal, that is, the request mobile communication terminal 240 through the gateway 230 in the wireless communication network 205. Transmission to the master mobile communication terminal 200. Accordingly, the key generation unit 202 of the master mobile communication terminal 200 generates a child key corresponding to the master key stored in the storage unit 201. More specifically, when the key request for the master key is requested A child key is generated by encrypting the public key provided from the 240 with the private key of the user of the master mobile communication terminal 200 (S408). An encryption method is an example of a one-way hash function.

When the one-way hash function is applied, the validity period of the child key can be set by adding restriction information of the child key.

The child key generated by the key generation unit 202 is transmitted by the key providing unit 203 to the request mobile communication terminal 240 through the key management server 210 (S410).

The requesting mobile communication terminal 240 extracts the private key used to encrypt the child key using the public key of the user of the master mobile communication terminal 200 and then uses the private key and the public key of the user of the requesting mobile communication terminal 240. After decrypting the child key (S412), the door lock may be controlled using the same (S414).

According to a preferred embodiment of the present invention, by encrypting and transmitting the master key that can control the opening and closing of the door lock, not only can the master key be securely transmitted, but also the master key can be transmitted to a user desired by the user of the master mobile communication terminal.

It has been described so far limited to the preferred embodiment of the present invention, it is obvious that the technology of the present invention can be easily modified by those skilled in the art. Such modified embodiments should be included in the technical spirit described in the claims of the present invention.

The present invention can be usefully used for security services, such as security services using digital door locks, which are active according to the recent rapid development of wired and wireless communication and the advancement of door lock technology.

In addition, according to the present invention, by opening the door lock using a mobile communication terminal, by transmitting the master key stored in the mobile communication terminal to any other mobile communication terminal, the key for controlling the door lock opening and closing to other users desired by the absent user Can provide a high quality door lock service with excellent security.

1 is a view showing a door opening and closing system using a general mobile communication terminal,

Figure 2 is a block diagram showing a door opening and closing system according to an embodiment of the present invention,

FIG. 3 is a diagram for describing data stored in a key storage unit of FIG. 2.

4 is a flowchart illustrating a key management method according to an exemplary embodiment of the present invention.

<Brief description of the major symbols in the drawings>

200: master mobile communication terminal 205: wireless communication network

210: key management server 220: authorized authentication server

230: gateway

240: request mobile communication terminal

Claims (21)

A storage unit for receiving and storing a master key for opening and closing the door lock through a wireless communication network; A key generator for generating a child key corresponding to the master key according to a key request of an arbitrary mobile communication terminal through the wireless communication network; A key providing unit for providing a child key generated by the key generation unit to the arbitrary mobile communication terminal through the wireless communication network; Mobile communication terminal for opening and closing the door lock comprising a. The method of claim 1, And receiving the master key through a secure channel between the mobile communication terminal and the wireless communication network and storing the master key in the storage unit. The method of claim 1, Decryption unit for receiving the decrypted master key secured by the PKI method using a user certificate to store in the storage unit Mobile communication terminal for opening and closing the door lock further comprising. The method of claim 1, And receiving and storing the master key set in the door lock by using the short range communication interface for short range communication with the door lock and storing the master lock in the storage unit. The method of claim 4, wherein The short-range communication interface is a mobile communication terminal for opening and closing the door lock, characterized in that any one of RF communication, Bluetooth and infrared communication. The method of claim 1, The key generation unit generates the child key by encrypting the master key with a public key of a public certificate in the arbitrary mobile communication terminal and a private key of a public certificate in the mobile communication terminal storing the master key. Mobile communication terminal for opening and closing the door lock. The method of claim 6, The key generation unit generates the child key by applying a public key of an authorized certificate in the arbitrary mobile communication terminal and a private key of the public certificate in the mobile communication terminal storing the master key to a one-way hash function. Mobile communication terminal for opening and closing the door lock. The method of claim 7, wherein The key generation unit may receive information for limiting use of the child key when the one-way hash function is applied, and set a valid period of the child key based on the received information. terminal. The method of claim 8, The information for limiting use is a mobile communication terminal for opening and closing the door lock, characterized in that at least one of the date, time and number. The method of claim 1, The storage unit, a plurality of maskey for controlling the opening and closing of different door locks are stored, each of the master key is a mobile communication terminal for opening and closing the door lock, characterized in that different service ID and key ID is set. A user authentication unit for performing user authentication on a master mobile communication terminal and a key request mobile communication terminal connected through a wireless communication network; An encryption unit for encrypting and transmitting a master key to be transmitted to the authenticated mobile communication terminal through the user authentication unit; A key request processing unit for receiving a key request message from the key request mobile communication terminal connected through the wireless communication network and requesting a key from the master mobile communication terminal according to the key request message; A child key transmitter for receiving a child key corresponding to the master key from the master mobile communication terminal receiving the key request and transmitting the child key to the key requesting mobile communication terminal. Key management server comprising a. The method of claim 11, The user authentication unit, the key management server, characterized in that for authenticating the user based on the authorized certificate information in the master mobile communication terminal. The method of claim 11, And the child key transmitting unit transmits the child key to the key request mobile communication terminal in the form of an SMS message through the wireless communication network. Registering a master key with the master mobile communication terminal; Generating a child key by encrypting the master key when a key request of a key request mobile communication terminal is received through a wireless communication network; Transmitting the generated child key to the key requesting mobile communication terminal through the wireless communication network; Key management method using a mobile communication terminal comprising a. The method of claim 14, Registering the master key, Accessing a key management server managing the master key through the wireless communication network; Receiving user authentication from the connected key management server; Receiving the master key as the user authentication is completed; Storing in the storage unit of the master mobile communication terminal Key management method using a mobile communication terminal comprising a. The method of claim 15, The receiving of the user authentication may include receiving the user authentication using an ID and password of the user of the master mobile communication terminal or using an authorized certificate in the master mobile communication terminal. The method of claim 15, In the step of receiving the master key, after establishing a secure channel between the key management server and the master mobile communication terminal, the key management using the mobile communication terminal, characterized in that receiving the master key using the formed security channel. Way. The method of claim 15, The step of receiving the master key, is provided with a master key encrypted by the key management server, In the storing of the master key, the encrypted master key is decrypted and stored in the storage unit. The method of claim 14, Generating the child key, And generating the child key by encrypting the registered master key with the public key of the key requesting mobile communication terminal user and the private key of the master mobile communication terminal user. The method of claim 19, The generating of the child key may include generating the child key by applying the public key of the key request mobile communication terminal user and the private key of the master mobile communication terminal user to a one-way hash function. Key management method using. The method of claim 20, Generating the child key, Setting usage restriction information of the child key; Generating the child key having a validity period by applying the usage restriction information to the one-way hash function; Key management method using a mobile communication terminal comprising a.

Images