Active access authentication method and device using the same

Abstract

To provide an authentication method, a program, and a terminal that reduce the time required to perform user authentication.SOLUTION: In a management system, to authenticate a user, a terminal receives a first advertising packet from a control device, requests an encryption key of the control device from a server based on at least one of control device identification information or area identification information included in the first advertising packet, receives the encryption key of the control device from the server, determines whether the terminal has authority to access a target area based on at least one of the control device identification information or area identification information, and if it is determined that the terminal has authority to access the target area, encrypts authentication data to be sent to the control device based on the encryption key of the control device, and sends the encrypted authentication data to the control device.SELECTED DRAWING: Figure 6

Description

[Technical field]

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS This application claims priority under 35 U.S.C. § 119 to Korean Patent Application No. 10-2023-0099689, filed with the Korean Intellectual Property Office on July 31, 2023, the disclosure of which is incorporated herein by reference in its entirety.

[0002] The present disclosure relates to an access authentication method and a device using the same. [Background technology]

[0003] In the field of user authentication, payment processing, and use of specific devices for access control of buildings or specific areas, techniques are used to improve convenience by utilizing user terminals. In such prior art techniques, the user terminals may be implemented by card keys or the like, and more recently, terminals such as smartphones carried by users have been widely used.

[0004] However, the terminal may require more time to obtain the information required for user authentication compared to the conventional card key, which may cause a corresponding inconvenience to the user in terms of delay.

[0005] In addition, in the case of conventional Bluetooth® Low Energy (BLE) communication, there may be problems that the time required to perform communication varies depending on the terminal's operating system, or that more time is required to send or receive data than a user expects. Summary of the Invention

[0006] An object to be achieved by the present disclosure is to provide a control method for reducing the time required to perform user authentication.

[0007] In addition, another object to be achieved by the present disclosure is to provide a control method for preventing errors in user authentication according to the operating system of a terminal.

[0008] The objectives to be achieved by the present disclosure are not limited to those mentioned above, and other objectives not mentioned above can be clearly understood by those skilled in the art based on the description provided below and the accompanying drawings.

[0009] According to an embodiment, a method for authenticating a terminal includes: a step of receiving a first advertising packet from a control device, where the first advertising packet includes at least one of control device identification information for identifying the control device or area identification information for identifying a target area managed by the control device; a step of requesting an encryption key of the control device from a server based on at least one of the control device identification information or the area identification information included in the first advertising packet; a step of receiving the encryption key of the control device from the server; a step of determining whether the terminal has authority to access the target area based on at least one of the control device identification information or the area identification information; a step of encrypting authentication data to be transmitted to the control device based on the encryption key of the control device if it is determined that the terminal has the authority to access the target area; and a step of transmitting the encrypted authentication data to the control device.

[0010] The technical solutions of the present disclosure are not limited to those mentioned above, and other technical solutions not mentioned above may be clearly understood by those skilled in the art based on the description provided below and the accompanying drawings.

[0011] In accordance with the present disclosure, the time required to perform user authentication may be reduced.

[0012] In addition, according to the present disclosure, user authentication errors that may occur depending on the operating system of the terminal can be prevented.

[0013] The effects of the present disclosure are not limited to those mentioned above, and other effects not mentioned above can be clearly understood by those skilled in the art based on the description provided below and the accompanying drawings. [Brief description of the drawings]

[0014] These and other aspects, features, and advantages of particular embodiments of the present disclosure will become more apparent from the following description taken in conjunction with the accompanying drawings.

[0015] [Figure 1] FIG. 1 illustrates an environment for a management system, according to an embodiment. [Diagram 2] FIG. 2 is a block diagram of a terminal according to an embodiment. [Diagram 3] FIG. 2 is a block diagram of a control device according to an embodiment. [Figure 4] FIG. 2 is a block diagram of a server according to an embodiment. [Diagram 5] FIG. 2 is a diagram provided to explain the registration of a control device at a server, according to an embodiment. [Figure 6] FIG. 2 is a diagram provided to explain a user authentication method, according to an embodiment. [Figure 7] FIG. 2 is a diagram provided to explain a threshold distance between a terminal and a control device according to an embodiment. [Figure 8A] 1 is a diagram provided to explain the operation of a terminal and a control device according to an authentication data transmission method according to an embodiment. [Figure 8B] 1 is a diagram provided to explain the operation of a terminal and a control device according to an authentication data transmission method according to an embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0016] The embodiments described in this specification are provided to clearly explain the technical concept of the present disclosure for those skilled in the art, and the present disclosure is not limited to the embodiments described in this specification, and the scope of the present disclosure should be interpreted as including various modifications or alterations without departing from the technical concept of the present disclosure.

[0017] The terms used in this specification are general terms widely used in consideration of the function of the present disclosure, but the terms may change according to the intention of a person skilled in the art, precedent, or the emergence of new technology. However, when a term is defined and used as having a specific meaning, the meaning of the term is separately specified. Accordingly, the terms used in this specification should be interpreted based on the substantial meaning of the terms and contents described throughout this specification, not based on the name of the term.

[0018] The drawings attached to this specification are provided to assist in easily explaining the present disclosure, and the shapes shown in the drawings may be displayed in an exaggerated manner, if necessary, for easy understanding of the present disclosure, and the present disclosure is not limited by the drawings.

[0019] In this specification, detailed descriptions of well-known structures or functions are omitted since they would unnecessarily obscure the subject matter of the present disclosure.

[0020] Hereinafter, an access management method and an access management device using the same according to an embodiment of the present disclosure will be described.

[0021] FIG. 1 is a diagram illustrating an environment of a management system according to an embodiment.

[0022] Referring to FIG. 1, the management system 10 may include a terminal 100, a control device 200, and a server 300.

[0023] The terminal 100 may communicate with at least one of the control device 200 or the server 300, and may transmit or receive various information. For example, the terminal 100 may transmit or receive information required for user authentication to or from the control device 200. Here, user authentication may refer to authentication performed to determine whether a user or a user terminal has a specific authority. For example, user authentication may include authentication of various authorities, such as access authority authentication regarding whether a user or a user terminal has authority to access a specific area, payment authority authentication regarding whether a user or a user terminal has authority to perform a payment process, use authority authentication regarding whether a user or a user terminal has authority to use a specific device, and operation mode setting authentication regarding whether a user or a user terminal has authority to set an operation mode of a specific device.

[0024] In addition, the terminal 100 may transmit an access request and / or data required for the access request to the control device 200 or the server 300. In addition, according to an embodiment, the terminal 100 may perform the user authentication described above.

[0025] In addition, when user authentication is performed, the terminal 100 may request the control device 200 or the server 300 to process the user authentication, and may obtain a result of the request for the processing for user authentication from the control device 200 or the server 300. In addition, the terminal 100 may obtain information regarding whether it is possible to perform the processing for user authentication from the control device 200 or the server 300, and may perform the processing for user authentication based on the information.

[0026] In addition, applications may be provided on the terminal 100 for implementing some of the embodiments described below.

[0027] The terminal 100 may be implemented by a smartphone, a tablet, a personal digital assistant (PDA), a laptop, a wearable device, or the like. Alternatively, the terminal 100 may be implemented by a smart card, an integrated circuit (IC) card, a magnetic card, a radio frequency (RF) chip capable of recording data, or the like.

[0028] The control device 200 may communicate with at least one of the server 300 or the terminal 100 and may transmit or receive various information. In addition, the control device 200 may perform various processing operations according to the user authentication result described above. For example, the control device 200 may control the user's access to a particular area, control the user's payment processing, control the user's use of a particular device, or control the operation mode of a particular device according to the user authentication result.

[0029] Specifically, when a user's access to a specific area is restricted by a gate, the control device 200 may control the gate to restrict the user's access to the specific area according to the user authentication result. Here, the gate may be a device that physically restricts the user's access, and may include an access restriction device (e.g., an access bar, an access door, etc.). The control device 200 may provide an unlock signal to the gate according to the user authentication result to control the gate to be opened and allow the user's access. In addition, the control device 200 may not provide an unlock signal to the gate according to the user authentication result, or may provide a lock signal to the gate to control the gate to be closed and prevent the user's access. In addition, according to an embodiment, the control device 200 may be disposed inside or outside the gate.

[0030] In addition, when the control device 200 controls the payment processing, the control device 200 may execute a payment authorization procedure as a process according to the user authentication result. For example, the control device 200 may receive a payment request from the terminal 100, and may accept or reject the payment request based on the user authentication result. In addition, according to an embodiment, the payment authorization procedure may be executed in the terminal 100 or the server 300.

[0031] In addition, the control device 200 may execute various control operations based on the user authentication result. For example, when the control device 200 controls a gate for accessing a public transportation facility, the control device 200 may control the gate based on the payment authorization result. In addition, the control device 200 may provide the payment authorization result to at least one of the server 300 or the terminal 100. In addition, when the control device 200 controls the use of a specific device according to the user authentication result, the control device 200 may control the use of the specific device through software installed on the specific device based on the user authentication result, or may control the use of the specific device by controlling a restriction device for physically restricting the use of the specific device.

[0032] In addition, when the control device 200 controls the operation mode of a specific device, the control device 200 may configure the operation mode of the specific device based on a user authentication result. For example, when the control device 200 controls an access control device for managing access to a specific area, the control device 200 may control the access control device in a security mode for increasing the security level in the specific area according to the user authentication result, or may control the access control device in a normal mode in which the security mode is disabled. In addition, according to an embodiment, the access control device may be included in the control device 200.

[0033] Various processing operations performed according to the user authentication result may also be performed in the server 300 or the terminal 100 .

[0034] In addition, according to an embodiment, the control device 200 may perform the operations for user authentication described above. When user authentication is performed, the control device 200 may request the terminal 100 or the server 300 to process the user authentication, and may obtain a result of the request for processing from the terminal 100 or the server 300. In addition, the control device 200 may obtain a result from the terminal 100 or the server 300 regarding whether it is possible to perform the processing for user authentication, and may perform the processing for user authentication based on the result.

[0035] The server 300 may communicate with at least one of the control device 200 or the terminal 100 and may transmit or receive various information.

[0036] According to an embodiment, the server 300 may provide information required for user authentication to at least one of the control device 200 or the terminal 100. In addition, the server 300 may perform user authentication and provide a result of the user authentication to at least one of the control device 200 or the terminal 100. In addition, if the user authentication is performed in at least one of the control device 200 or the terminal 100, the server 300 may obtain a result of the user authentication from at least one of the control device 200 or the terminal 100.

[0037] The server 300 may execute a process according to the user authentication. For example, when receiving a request for a process for user authentication from the terminal 100 or the control device 200, the server 300 may execute the process according to the user request, or may determine whether the process according to the user request will be executed by the terminal 100 or the control device 200, and may provide the result of the determination to the terminal 100 or the control device 200. Here, the process for user authentication may refer to a subsequent operation executed based on the user authentication, such as controlling access to a specific area by the user, controlling payment processing of the user, controlling use of a specific device by the user, or controlling an operation mode of a specific device, according to a user authentication result.

[0038] However, the environmental diagram shown in Fig. 1 is merely an example for convenience of explanation, and the present disclosure is not limited thereto. According to some embodiments, components may be added to, omitted from, or divided into the environmental diagram of Fig. 1.

[0039] FIG. 2 is a block diagram of a terminal according to an embodiment.

[0040] Referring to FIG. 2, the terminal 100 may include a terminal communication unit 110, a terminal display unit 120, a terminal input unit 130, a location information collection unit 140, a terminal storage unit 150, a terminal control unit 160, and a terminal biometric data input unit 170.

[0041] The terminal communication unit 110 may communicate with at least one of the server 300 or the control device 200. For example, the terminal communication unit 110 may transmit or receive information required for user authentication or information related to a user authentication result to or from at least one of the server 300 or the control device 200.

[0042] In addition, the terminal communication unit 110 may include a mobile communication module employing Bluetooth low energy (BLE), Bluetooth, wireless local area network (WLAN), Wireless Fidelity (WiFi), WiFi Direct, near field communication (NFC), infrared data association (IrDA), ultra wide band (UWB), Zigbee, 3rd generation (3G), 4G, or 5G, and wired or wireless modules for transmitting or receiving data via various other communication standards.

[0043] The terminal display unit 120 may output various visual information. For example, when the control device 200 is detected through communication with the control device 200 and a communication connection is established, the terminal display unit 120 may output relevant information. In addition, the terminal display unit 120 may visually output a user authentication result. In addition, the terminal display unit 120 may visually output a message received from the server 300.

[0044] The terminal display unit 120 may be a liquid crystal display (LCD), an organic light emitting diode (OLED), an active matrix organic LED (AMOLED) display, or the like. If the terminal display unit 120 is provided as a touch screen, the terminal display unit 120 may perform the functions of the terminal input unit 130. In this case, a separate terminal input unit 130 may not be provided according to preference, and a terminal input unit 130 performing limited functions such as volume control, a power button, and a home button may be provided.

[0045] The terminal input unit 130 may acquire a signal corresponding to a user input. For example, the terminal input unit 130 may acquire an input for requesting user authentication from the server 300 or the control device 200. In addition, the terminal input unit 130 may acquire an input for acquiring information required for user authentication (e.g., user authority information, user personal information (or user or terminal identification information, identification information required for payment processing (e.g., user card information, authentication information corresponding to card information), user biometric data, encryption information, etc.)).

[0046] In addition, the terminal input unit 130 may be implemented by a keyboard, a keypad, a button, a jog shuttle, a wheel, or the like. In addition, the user input may be, for example, a button press, a touch, and a drag. If the terminal display unit 120 is implemented by a touch screen, the terminal display unit 120 may perform the role of the terminal input unit 130.

[0047] The location information collecting unit 140 may obtain location information for identifying a location of the terminal 100. For example, the location information collecting unit 140 may obtain coordinate information for determining a location, such as a global positioning system (GPS) sensor. In another example, the location information collecting unit 140 may determine a location of the terminal 100 based on a signal received from an external device. For example, when the terminal 100 receives a signal indicating a specific area from the control device 200, the terminal 100 may identify that the terminal 100 is within the specific area in response to receiving the signal.

[0048] In addition, the terminal storage unit 150 may store various data. For example, the terminal storage unit 150 may store data necessary for the operation of the terminal 100 (for example, information necessary for user authentication (for example, user authority information, user personal information (or user or terminal identification information, identification information necessary for payment processing (for example, user card information, authentication information corresponding to card information), user biometric authentication data, encryption information, etc.)).

[0049] The terminal storage unit 150 may include at least one type of storage medium among flash memory type, hard disk type, multimedia card micro type, card type memory (e.g., SD or XD memory), random access memory (RAM), static random access memory (SRAM), read only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, magnetic disk, and optical disk. The memory may store information temporarily, permanently, or semi-permanently, and may be provided as an embedded type or a removable type.

[0050] The terminal control unit 160 may control each component of the terminal 100, or may process or calculate various information. In addition, the terminal control unit 160 may obtain signals from some components included in the terminal 100. In addition, the terminal control unit 160 may control operations for performing some steps of the methods described below that are performed in the terminal 100, or may perform calculations necessary to perform the steps.

[0051] The terminal control unit 160 may be implemented by software, hardware, and a combination thereof. For example, with respect to hardware, the terminal control unit 160 may be implemented by a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a semiconductor chip, and various other types of electronic chips. In another example, with respect to software, the terminal control unit 160 may be implemented by a logic program or various computer languages ​​executed in accordance with the hardware described above.

[0052] The terminal biometric data input unit 170 may receive the biometric data of the user. The biometric data may refer to at least one of the user's voice, fingerprint, iris, face, and vein information. The terminal biometric data input unit 170 may be implemented by at least one of a microphone to input the user's voice information, a screen scanner to input the user's fingerprint information, and a camera to input the user's iris, face, and vein information.

[0053] Terminal 100 may not necessarily include all of the components described above, and some components may be omitted as desired. For example, if terminal 100 does not receive biometric data, terminal 100 may be provided without terminal biometric data entry unit 170. In addition, terminal 100 may be provided with additional components to perform additional functions and operations as desired.

[0054] FIG. 3 is a block diagram of a control device according to an embodiment.

[0055] Referring to FIG. 3, the control device 200 may include a communication unit 210, a display unit 220, an output unit 230, a sensor unit 240, a storage unit 250, a power supply unit 260, a control unit 270, a biometric data input unit 280, and an input unit 290.

[0056] The communication unit 210 may communicate with at least one of the server 300 or the terminal 100. For example, the communication unit 210 may transmit or receive information required for user authentication or user authentication result information to or from at least one of the server 300 or the terminal 100.

[0057] The communication unit 210 may generally perform communication according to a wireless communication standard and may include a mobile communication module employing BLE, Bluetooth, WLAN, WiFi, WiFi Direct, NFC, IrDA, UWB, Zigbee, 3G, 4G, or 5G, and wired or wireless modules for transmitting data through various other communication standards. In addition, the communication unit 210 may include a short-range wireless module supporting NFC, radio frequency identification (RFID).

[0058] The display unit 220 may output information to be visually provided to a user, for example, when a door open signal is received, the display unit 220 may output visual information indicating the receipt of the door open signal.

[0059] The display unit 220 may be an LCD, OLED, or AMOLED display. If the display unit 220 includes a touch panel, the display unit 220 may operate as an input device based on touch input.

[0060] The output unit 230 may output information to be acoustically provided to the user. For example, if a door open signal is received, the output unit 230 may output audible information indicating the receipt of the door open signal. In addition, if a setting change signal is received, the output unit 230 may output audible information indicating the receipt of the setting change signal.

[0061] The output unit 230 may be a speaker or a buzzer for outputting sound.

[0062] The sensor unit 240 may obtain signals related to the external environment required for the control device 200. For example, the sensor unit 240 may identify whether a movable object (e.g., a user) is present in the vicinity of the control device 200. In addition, the sensor unit 240 may be disposed within the control device 200 or disposed in the vicinity of the control device 200. According to an embodiment, the sensor unit 240 may not be included in the control device 200. In this case, a separate sensor may be disposed in the vicinity of the control device 200.

[0063] Various information may be stored in the storage unit 250. For example, the storage unit 250 may store a program for executing the control operation of the control unit 270, and may store data received from the outside and data generated in the control unit 270. In addition, the storage unit 250 may store information necessary for the operation of the control device 200 (for example, information necessary for user authentication (for example, user authority information, user identification information (for example, identifier information of a user or a user terminal, biometric authentication data of a user, encryption information)))) and user authentication result information.

[0064] The storage unit 250 may include at least one type of storage medium of the following types: flash memory type, hard disk type, multimedia card micro type, card type memory (e.g., SD or XD memory), RAM, SRAM, ROM, EEPROM, PROM, magnetic memory, magnetic disk, optical disk. The memory may store information temporarily, permanently, or semi-permanently, and may be provided in an embedded type or a removable type.

[0065] The power supply unit 260 may provide the power required to lock or unlock the gate. Additionally, the power supply unit 260 may provide the power required to open and close the gate. The power supply unit 260 may be provided as a motor, a solenoid, or an actuator.

[0066] When the power supply unit 260 provides the power necessary to lock or unlock the gate, the power supply unit 260 may provide power to change and / or maintain a locking unit (not shown) for locking or unlocking the gate into a locked or unlocked state. The locking unit may be provided as a deadbolt, a latch bolt, or a combination thereof. Additionally, the locking unit is not limited to a deadbolt and a latch bolt, and any typical locking unit may be used.

[0067] According to an embodiment, the power supply unit 260 may or may not be included in the control device 200. In addition, the power supply unit 260 may be arranged in the vicinity of the control device 200 in the form of a separate device. In this case, the control device 200 may provide a signal to the power supply unit 260 for controlling the power supply unit 260. In addition, the lock unit described above may be included in the control device 200 or arranged in the vicinity of the control device 200 to be controlled by the control device 200.

[0068] The control unit 270 may control each component of the control device 200 or may process and calculate various information. The control unit 270 may obtain signals from some components included in the control device 200. In addition, the control unit 270 may control operations for performing some steps of the methods described below that are performed in the control device 200 or may perform calculations necessary to perform the steps.

[0069] The control unit 270 may be implemented by software, hardware, and a combination thereof. For example, with respect to hardware, the control unit 270 may be implemented by an FPGA, an ASIC, a semiconductor chip, or various types of electronic circuits. For example, with respect to software, the control unit 270 may be implemented by a logic program or various computer languages ​​executed according to the hardware described above.

[0070] The biometric data input unit 280 may receive input of the user's biometric data. For example, the biometric data input unit 280 may receive at least one of the user's voice, fingerprint, iris, face, and vein information. The biometric data input unit 280 may be implemented by at least one of a microphone through which the user's voice information is input, a screen scanner through which the user's fingerprint information is input, or a camera through which the user's iris, face, and vein information is input.

[0071] The input unit 290 may be configured to receive various inputs. For example, the input unit 290 may obtain an input for requesting user authentication from the server 300 or the terminal 100. In addition, the input unit 290 may obtain an input for obtaining information required for user authentication (e.g., identification information of a user or a user terminal, encryption information, biometric data). In addition, the input unit 290 may receive an input of setting change information for changing the settings of the control device 200.

[0072] In addition, the input unit 290 may receive an input of a user authentication request from a user. For example, if the user authentication is an authentication of the user's access to a specific area, the control device 200 may receive an input to open a door, and may open the door by activating the power unit 260, or may send an access authentication request signal to the server 300 or the terminal 100. For example, the input unit 290 may be implemented by a keyboard, a keypad, a button, a switch, a jog shuttle, a wheel, or the like. In addition, the user's input may be, for example, a switch press, a button press, a touch and a drag. If the display unit 220 is implemented by a touch screen, the display unit 220 may perform the role of the input unit 290.

[0073] A control device 200 according to an embodiment of the present disclosure does not necessarily include all of the components described above, and some components may be omitted according to preference.

[0074] For example, the control device 200 may include a control device 200 including a communication unit 210 and a control unit 270. More specifically, the control device 200 may perform functions such as receiving information acquired from the terminal 100 through the communication unit 210 performing the function of a reader, analyzing the information acquired through the control unit 270 performing the function of a controller, and controlling operations such as access management, attendance management, and system mode change.

[0075] Additionally, the control device 200 may be provided with additional components to perform additional functions and operations as selected.

[0076] FIG. 4 is a block diagram of a server according to an embodiment.

[0077] Referring to FIG. 4, the server 300 may include a server communication unit 310 , a server input unit 320 , a server storage unit 330 , a server display unit 340 and a server control unit 350 .

[0078] The server communication unit 310 may communicate with at least one of the terminal 100 or the control device 200. In another example, the server communication unit 310 may transmit biometric data to the terminal 100 to be stored in the control device 200.

[0079] In addition, the server communication unit 310 may include a mobile communication module employing BLE, Bluetooth®, WLAN, WiFi®, WiFi® Direct, NFC, IrDA, UWB, Zigbee®, 3G, 4G, or 5G, as well as wired or wireless modules for transmitting data over various other communication standards.

[0080] The server input unit 320 may obtain an electrical signal corresponding to a user input, and may include a keypad, a keyboard, a switch, a button, and a touch screen.

[0081] The server storage unit 330 may store various data. For example, the server storage unit 330 may store information required for user authentication (e.g., user authority information, user personal information (or user or terminal identification information, identification information required for payment processing (e.g., user card information, authentication information corresponding to card information), user biometric authentication data, encryption information)), or information related to user authentication results.

[0082] In addition, the server storage unit 330 may store information obtained from the terminal 100 or the control device 200. In addition, the server storage unit 330 may store programs necessary for the operation of the server 300.

[0083] In addition, the server storage unit 330 may include at least one type of storage medium of the following types: flash memory type, hard disk type, multimedia card micro type, card type memory (e.g., SD or XD memory), RAM, SRAM, ROM, EEPROM, PROM, magnetic memory, magnetic disk, optical disk. In addition, the memory may store information temporarily, permanently, or semi-permanently, and may be provided in an embedded type or a removable type.

[0084] The server display unit 340 may output visual information. For example, the server display unit 340 may be an LCD, OLED, or AMOLED display.

[0085] In addition, the server control unit 350 may control each component of the server 300 or process and calculate various information. In addition, the server control unit 350 may control operations for executing some steps of the methods described below that are executed in the server 300 or perform calculations necessary to execute the steps.

[0086] The server control unit 350 may be implemented by software, hardware, or a combination thereof. For example, with respect to hardware, the server control unit 350 may be implemented by an FPGA, an ASIC, a semiconductor chip, or various types of electronic circuits. For example, with respect to software, the server control unit 350 may be implemented by a logic program or various computer languages ​​executed according to the hardware described above.

[0087] The server 300 does not necessarily include all of the components described above, and some components may be omitted as desired. For example, if the server 300 does not directly provide visual information, the server 300 may be provided without a server display unit 340. In addition, the server 300 may be provided with additional components to perform additional functions and operations as desired.

[0088] FIG. 5 is a diagram provided to explain the registration of a control device in a server according to an embodiment.

[0089] Referring to FIG. 5, a communication connection may be established between the control device 200 and the terminal 100. For example, when communication is performed between the control device 200 and the terminal 100 by using a BLE communication protocol, the control device 200 may broadcast an advertising packet. When the terminal 100 is located at a predetermined distance from the control device 200, the terminal 100 may receive the advertising packet from the control device 200 and perform a scan in response to receiving the advertising packet. After the scan is performed by the terminal 100, the control device 200 and the terminal 100 may be communicatively connected to each other such that a communication channel is established between the control device 200 and the terminal 100. Hereinafter, for convenience of explanation, it is described that communication is performed between the control device 200 and the terminal 100 by using a BLE communication protocol, but this should not be considered as limiting. Communication between the control device 200 and the terminal 100 may be performed by using various communication protocols, such as the Bluetooth communication protocol, the UWB communication protocol, or the like.

[0090] In addition, the control device 200 may transmit the encryption key of the control device to the terminal 100. In an embodiment, the control device 200 may store the encryption key at the time of manufacture, or may obtain the encryption key from a server or another device. In addition, the encryption key may be a public key.

[0091] In addition, the terminal 100 may transmit the obtained encryption key of the control device 200 to the server 300.

[0092] In this case, according to an embodiment, the terminal 100 may acquire identification information of the control device 200 (e.g., a device serial number of the control device 200) and / or area identification information for identifying an area managed by the control device 200. The identification information and / or area identification information of the control device 200 may be included in an advertising packet broadcast by the control device 200, and may be received by the terminal 100 from the control device 200 after a communication connection is established between the control device 200 and the terminal 100. The terminal 100 may transmit the identification information and / or area identification information of the control device 200 when transmitting an encryption key of the control device 200 to the server 300.

[0093] In addition, the server 300 may transmit a control device-exclusive encryption key to the terminal 100 in response to receiving the encryption key of the control device 200. The control device-exclusive encryption key may be an encryption key assigned only to the control device 200, and the server 300 may set any one of the encryption keys stored in advance as the control device-exclusive encryption key, or may newly generate a control device-exclusive encryption key. For example, the server 300 may generate the control device-exclusive encryption key based on the encryption key of the control device 200. In addition, the control device-exclusive encryption key may be a control device-exclusive public key. In addition, the control device-exclusive encryption key may be used by the control device 200 to verify authentication data acquired from the terminal 100 when user authentication is performed.

[0094] The server 300 may match the identification information and / or the area identification information of the control device 200 with the control device-specific encryption key and may store the matched information. In addition, when the server 300 transmits the control device-specific encryption key to the terminal 100, the control device 200 may be managed as a registered control device 200.

[0095] In addition, in an embodiment, the server 300 may send server login information to the terminal 100 in response to receiving the encryption key of the control device 200. In this specification, the server login information may include information for accessing the server 300, and may include identification information for accessing the server 300 and a password (or encryption key) for accessing the server 300. According to an embodiment, the identification information for accessing the server 300 and the password for accessing the server 300 may be generated only for the control device 200. If the control device 200 can perform communication with the server 300, the control device 200 may access the server 300 by using the server login information received from the terminal 100. In addition, after accessing the server 300, the control device 200 may obtain the control device-specific encryption key described above from the server 300.

[0096] In addition, when the server 300 transmits the server login information to the terminal 100, the server 300 may store the identification information and / or the area identification information of the control device 200. In addition, when the server 300 transmits the server login information to the terminal 100, the server 300 may manage the control device 200 as a registered control device 200.

[0097] In addition, the terminal 100 may acquire a control device-specific encryption key and / or server login information, and may transmit the acquired control device-specific encryption key and / or server login information to the control device 200. In addition, according to an embodiment, the terminal 100 may acquire information about the server 300 (e.g., identification information of the server 300) from the server 300. In this case, the terminal 100 may transmit the information about the server 300 to the control device 200.

[0098] The control device 200 may store the control device-specific encryption key received from the terminal 100. In addition, the control device 200 may obtain information about the server 300 from the terminal 100 and store the information about the server 300. The control device 200 obtains the control device-specific encryption key, so that the control device 200 can be registered with the server 300 without performing direct communication between the control device 200 and the server 300.

[0099] In addition, the control device 200 may store the server login information received from the terminal 100. The control device 200 may obtain the server login information and may access the server 300 by using the server login information. Accordingly, the control device 200 may be registered with the server 300 early in the registration process without performing direct communication with the server 300.

[0100] When the control device 200 is registered with the server 300, the terminal 100 may obtain information necessary for user authentication from the server 300, and may access the control device 200 registered with the server 300 by using the information necessary for user authentication.

[0101] FIG. 6 is a diagram provided to explain a user authentication method according to an embodiment.

[0102] 6, the control device 200 may broadcast an advertising packet. When the terminal 100 is located at a predetermined distance from the control device 200, the terminal 100 may receive the advertising packet from the control device 200. In this case, the advertising packet may include at least one of identification information of the control device 200 (e.g., a device serial number of the control device 200), area identification information for identifying an area managed by the control device 200, a random value, version information of a communication protocol through which the control device 200 communicates (e.g., version information of a communication protocol corresponding to the advertising packet, such as version information of a BLE communication protocol), or information regarding a model type of the control device 200.

[0103] In response to receiving the advertising packet, the terminal 100 may request the encryption key of the control device 200 from the server 300. For example, the encryption key of the control device 200 may include the public key of the control device 200 described above with reference to FIG. 5. In addition, the server 300 may transmit the encryption key of the control device 200 to the terminal 100. In an embodiment, the terminal 100 may provide the identification information and / or region identification information of the control device 200 included in the advertising packet to the server 300. In addition, the server 300 may identify the encryption key of the control device 200 from among pre-stored encryption keys based on the identification information and / or region identification information of the control device 200 obtained from the terminal 100, and may transmit the identified encryption key of the control device 200 to the terminal 100.

[0104] In addition, the terminal 100 may perform a scan for the control device 200. The terminal 100 may perform a scan for the control device 200 after receiving an advertising packet from the control device 200, or may perform a scan after requesting an encryption key of the control device 200 from the server 300.

[0105] In addition, the terminal 100 may determine whether the terminal 100 has the authority to access the target area. In this specification, the target area refers to the area controlled by the control device 200, and the area controlled by the control device 200 is expressed as the target area for convenience of description, but according to an embodiment, it is clear that the description of the present disclosure applies to the access to the control device 200 and the access to the target device indicating the area controlled by the control device 200.

[0106] Specifically, the terminal 100 may store reference access authority information in advance. The reference access authority information may include control device identification information to which the terminal 100 or a user of the terminal 100 has authority to access, and / or area identification information managed by the control device.

[0107] In the following description, for convenience of explanation, the control device identification information to which the terminal 100 or the user of the terminal 100 has authority to access is included as reference control device identification information, and the area identification information managed by the control device to which the terminal 100 or the user of the terminal 100 has authority to access is described as being expressed as reference area identification information. For example, the terminal 100 may obtain and store the reference control device identification information and / or the reference area identification information from a server.

[0108] In addition, the reference control device identification information and the reference area identification information may be stored in an application of the terminal 100 in the form of a card.

[0109] In this case, the reference control device identification information and the reference area identification information may be stored in different card forms according to each control device and / or area managed by each control device. In addition, when a card including the reference control device identification information and / or the reference area identification information corresponding to the control device 200 is selected in an application of the terminal 100, the terminal 100 may access the control device 200 and / or the area managed by the control device 200.

[0110] For example, the terminal 100 may receive a selection of a card including reference control device identification information and / or reference area identification information corresponding to the control device 200 in response to user input, or may select a card including reference control device identification information and / or reference area identification information corresponding to the control device 200 from among a plurality of cards based on the identification information and / or area identification information of the control device 200 received from the control device 200.

[0111] In addition, the terminal 100 may compare the identification information and / or area identification information of the control device 200 received from the control device 200 with the reference control device identification information and / or reference area identification information (i.e., reference access authority information), and if the identification information and / or area identification information of the control device 200 received from the control device 200 is included in the reference control device identification information and / or reference area identification information, the terminal 100 may determine that the terminal has authority to access the target area.

[0112] According to an embodiment, when a card is selected in an application of the terminal 100, the terminal 100 may compare the reference control device identification information and / or reference area identification information corresponding to the corresponding card with the control device 200 identification information and / or area identification information received from the control device 200, and may determine whether the terminal 100 has authority to access the target area.

[0113] In the prior art method, when the terminal 100 attempts to perform user authentication with respect to the control device 200, the control device 200 may determine whether the terminal 100 or the user of the terminal 100 has the authority to access the target area. However, as described above, according to the present disclosure, the terminal 100 may determine in advance whether the terminal 100 or the user of the terminal 100 has the authority to access the target area before attempting to perform user authentication with respect to the control device 200, so that the terminal 100, rather than the control device 200, can have the discretion to authenticate the user.

[0114] In addition, the terminal 100 may determine whether to send authentication data to the control device 200. Specifically, the terminal 100 may determine whether the user of the terminal 100 has an intention to access the target area. If the terminal 100 determines that the user of the terminal 100 has an intention to access the target area and has the authority to access the target area, the terminal 100 may decide to send authentication data to the control device 200. For example, if the terminal 100 is located at a predetermined threshold distance from the control device 200, the terminal 100 may determine that the user has an intention to access the target area. If the terminal 100 is located away from the control device 200 by a distance longer than the predetermined threshold distance, the terminal 100 may determine that the user does not have an intention to access the target area. The predetermined distance may be set differently depending on the terminal 100 and / or the control device 200. This is explained below with reference to FIG.

[0115] FIG. 7 is a diagram provided to explain the threshold distance between a terminal and a control device according to an embodiment.

[0116] 7, the terminal 100 may determine the distance to the control device 400, 500 by using signals exchanged with the control device 400, 500. For example, the terminal 100 may receive a signal (e.g., a signal including an advertising packet) from the control device 400, 500, may calculate a received signal strength indicator (RSSI) value based on the signal received from the control device 400, 500, and may determine the distance to the control device 400, 500 based on the RSSI value.

[0117] In case (A), if the terminal 100 determines that the distance to the first control device 400 is within a first threshold distance, the terminal 100 may determine that the user intends to access the first control device 400 or an area / device controlled by the first control device 400 (hereinafter referred to as the first target area).

[0118] In the case of (B), if the terminal 100 determines that the distance to the second control device 500 is within the second threshold distance, the terminal 100 may determine that the user has an intention to access the second control device 500 or an area / device controlled by the second control device 500 (hereinafter referred to as a second target area). In this case, the second threshold distance may be longer than the first threshold distance.

[0119] In an embodiment, because the first threshold distance is shorter than the second threshold distance, the terminal 100 may determine that the user has the intention to access the first target area only if the terminal 100 is tagged on the first control device 400. In addition, if the terminal 100 is positioned in the user's pocket or the user is walking toward the second control device 500 while holding the terminal 100, the terminal 100 may determine that the user has the intention to access the second target area only if the terminal 100 is positioned within the second threshold distance from the second control device 500, even if the user has not tagged the terminal 100 on the second control device 500.

[0120] In addition, as in case (B), in order to apply a second threshold distance to determine whether the user has the intention to access the second target area, the second control device 500 may be pre-registered in the server as a second threshold distance application control device (hereinafter referred to as a walk-through control device).

[0121] For example, the second control device 500 may be registered as a walk-through control device by the terminal 100. For example, the terminal 100 may register the second control device 500 to the server as a walk-through control device by providing the server with identification information of the second control device 500 and / or area identification information of an area managed by the second control device 500. The terminal 100 may then receive an advertising packet from the second control device 500, obtain the identification information and / or area identification information of the second control device 500 from the advertising packet, and identify that the second control device 500 is registered with the server as a walk-through control device based on the identification information and / or area identification information of the second control device 500. In this case, the terminal 100 may apply a second threshold distance to determine whether the user has an intention to access the second target area. In addition, when the terminal 100 receives an advertising packet from the first control device 400 and obtains identification information and / or area identification information of the first control device 400 from the advertising packet, since the first control device 400 is not registered with the server as a walk-through control device, the terminal 100 may apply a first threshold distance to determine whether the user has the intention to access the first control device 400 and / or the first target area.

[0122] In another example, the second control device 500 may be registered as a walk-through control device by the terminal 100 or a device other than the second control device 500. In this case, the terminal 100 may obtain identification information and / or area identification information of the second control device 500 from the second control device 500, may provide the identification information and / or area identification information of the second control device 500 to a server, and may obtain information from the server indicating that the second control device 500 is registered as a walk-through control device. The terminal 100 may apply a second threshold distance to determine whether the user has an intention to access the second target area.

[0123] Additionally, in an embodiment, the terminal 100 may include information regarding at least one RSSI value for determining the first threshold distance or the second threshold distance.

[0124] For example, the terminal 100 may measure the RSSI value for each predetermined distance (e.g., 10 cm, 50 cm, 100 cm) to the first control device 400 and the second control device 500, and may prestore the measured RSSI value. In this case, since the first control device 400 is not registered in the server as a walk-through control device, the terminal 100 may apply a first threshold distance to determine whether the user has an intention to access the first target area, and may use the RSSI value corresponding to the pre-measured first threshold distance when determining whether the distance to the first control device 400 is within the first threshold distance. For example, if the first threshold distance is 10 cm and the RSSI value of the signal received from the first control device 400 is greater than the pre-stored RSSI value measured when the distance to the first control device 400 is 10 cm, the terminal 100 may determine that the user has an intention to access the first target area.

[0125] In addition, since the second control device 500 is registered in the server as a walk-through control device, the terminal 100 may apply a second threshold distance to determine whether the user has an intention to access the second target area, and may use a pre-measured RSSI value corresponding to the second threshold distance when determining whether the distance to the second control device 500 is within the second threshold distance. For example, if the second threshold distance is 100 cm and the RSSI value of the signal received from the second control device 500 is greater than a pre-stored RSSI value measured when the distance to the second control device 500 is 100 cm, the terminal 100 may determine that the user has an intention to access the second target area.

[0126] Referring again to FIG. 6, if the terminal 100 determines that the user of the terminal 100 has the intention to access the target area and has the authority to access the target area, the terminal 100 may decide to send authentication data to the control device 200. In addition, the terminal 100 may encrypt the authentication data. In this specification, the authentication data may include authentication information based on which the access control device 200 allows access to the control device 200. For example, the authentication information may include a password, signature information, or an authentication key. In addition, the terminal 100 may pre-store the authentication information of the control device 200. For example, the advertising packet that the terminal 100 obtains from the control device 200 may include the authentication information of the access control device 200. In addition, the terminal 100 may have already received the authentication information of the control device 200 from the control device 200.

[0127] In addition, the terminal 100 may obtain authentication information of the control device 200 from the server 300. For example, as described above with reference to FIG. 5, in the process of registering the control device 200 with the server 300, the control device 200 may send the authentication information of the control device 200 together with the encryption key of the control device 200 to the terminal 100, and the terminal 100 may send the authentication information of the control device 200 together with the encryption key of the control device 200 to the server 300. In addition, the server 300 may store the authentication information of the control device 200 together with the encryption key of the control device 200. Then, as described in FIG. 6, in the process of the terminal 100 obtaining the encryption key of the control device 200 from the server 300, the terminal 100 may receive the authentication information of the control device 200 together with the encryption key of the control device 200 from the server 300.

[0128] According to an embodiment, the authentication information may include information regarding whether the user of the terminal 100 is an administrator of the control device 200. The terminal 100 may include information regarding whether the user of the terminal 100 is an administrator of the control device 200 in the authentication information. In addition, according to an embodiment, the terminal 100 may receive information regarding whether the user of the terminal 100 is an administrator of the control device 200 from the server 300. For example, the server 300 may already include information regarding whether the user of the terminal 100 is a normal user or an administrator of the control device 200. In this case, as described in FIG. 6, in the process in which the terminal 100 obtains the encryption key of the control device 200 from the server 300, the terminal 100 may receive information regarding whether the user of the terminal 100 is an administrator of the control device 200 from the server 300 as authentication information together with the encryption key of the control device 200.

[0129] In addition, the authentication data may include a random value included in an advertising packet obtained from the control device 200. In addition, according to an embodiment, the authentication data may include a random value but may not include authentication information of the control device 200, or the authentication data may include authentication information of the control device 200 together with the random value.

[0130] In addition, the terminal 100 may encrypt the authentication data based on the encryption key of the control device 200 obtained from the server 300. In an embodiment, the terminal 100 may encrypt the authentication data in a shared key manner. For example, the terminal 100 may encrypt the authentication data in a shared key manner by using the public key of the control device 200 and the private key of the terminal 100 obtained from the server 300 described in FIG. 6.

[0131] In addition, the terminal 100 may determine the authentication data transmission method. Specifically, the terminal 100 may determine the authentication data transmission method based on version information of a communication protocol through which the terminal 100 communicates with the control device 200 (e.g., version information of a communication protocol corresponding to an advertising packet received from the control device 200). For example, the version information of a communication protocol through which the terminal 100 communicates with the control device 200, i.e., the version information of a communication protocol corresponding to an advertising packet, may be included in the advertising packet received from the control device 200.

[0132] In addition, the version information of the communication protocol through which the terminal 100 communicates with the control device 200 may be the version information of the BLE communication protocol. In the following description, the present disclosure is described based on the version information of the BLE communication protocol for convenience of description, but this should not be considered as limiting, and the description of the present disclosure may be applied to communication protocols other than BLE.

[0133] If the version information of the communication protocol through which the terminal 100 communicates with the control device 200 is higher than or equal to a predetermined version, the terminal 100 may determine to transmit encrypted authentication data by using an advertising packet. In this case, the terminal 100 may include the encrypted authentication data in the advertising packet and may transmit the advertising packet to the control device 200 to transmit the encrypted authentication data to the control device 200.

[0134] In an embodiment, if the version of the communication protocol supports a large-sized advertising packet so that the encrypted authentication data is included in the advertising packet, the terminal 100 may determine to transmit the encrypted authentication data by using the advertising packet. For example, if the version of the BLE communication protocol is lower than 5.0, a maximum of 31 bytes of data may be included in the advertising packet, whereas if the version of the BLE communication protocol is higher than or equal to 5.0, a maximum of 251 bytes of data may be included in the advertising packet. Correspondingly, if the encrypted authentication data is 168 bytes long and the version of the BLE communication protocol is lower than 5.0, the encrypted authentication data may not be included in the advertising packet. However, if the version of the BLE communication protocol is higher than or equal to 5.0, the encrypted authentication data may be included in the advertising packet.

[0135] Accordingly, if the version of the communication protocol supports a large-sized advertising packet so that encrypted authentication data is included in the advertising packet, i.e., if the version of the BLE communication protocol is higher than or equal to 5.0, the terminal 100 may determine to transmit the encrypted authentication data by using the advertising packet. In addition, if the version of the communication protocol does not support a large-sized advertising packet so that encrypted authentication data is included in the advertising packet, i.e., if the version of the BLE communication protocol is lower than 5.0, the terminal 100 may establish a communication channel with the control device 200 without using an advertising packet, and may transmit the encrypted authentication data to the control device 200 through the communication channel.

[0136] In addition, the terminal 100 may transmit the encrypted authentication data to the control device 200 in the determined authentication data transmission method. In addition, the control device 200 may decrypt the encrypted authentication data and perform user authentication based on the decrypted authentication data. In addition, the control device 200 may transmit the user authentication result to the terminal 100. In addition, the terminal 100 may transmit the user authentication result received from the control device 200 to the server 300.

[0137] Hereinafter, the present disclosure will be described in detail with reference to FIG.

[0138] 8A and 8B are diagrams provided to explain the operation of a terminal and a control device according to an authentication data transmission method according to an embodiment.

[0139] Referring to FIG. 8A, FIG. 8A illustrates the operation of the terminal 100 and the control device 200 when authentication data is transmitted by using an advertising packet. In FIG. 8A, if the version of the communication protocol is a version that supports a large-sized advertising packet so as to include encrypted authentication data in the advertising packet, that is, if the version of the BLE communication protocol is higher than or equal to 5.0, the terminal 100 may determine to transmit the encrypted authentication data by using an advertising packet. Specifically, the terminal 100 may include the encrypted data and identification information (universally unique identifier (UUID)) in the advertising packet. In this specification, the identification information refers to the identification information of the control device 200 (e.g., the device serial number of the control device 200), and may be included in the advertising packet that the terminal 100 obtains from the control device 200. The identification information of the control device 200 is included in the advertising packet to be provided from the terminal to the control device 200, whereby the control device 200 identifies that the advertising packet obtained from the terminal 100 includes the identification information of the control device 200, and accordingly, the control device 200 identifies that the terminal 100 has received the advertising packet broadcast by the control device 200.

[0140] In addition, in an embodiment, the terminal 100 may add a random value to the advertising packet. In this specification, the random value may be included in the advertising packet that the terminal 100 obtains from the control device 200. The random value provided by the control device 200 is included in the advertising packet that the terminal 100 provides to the control device 200, so that the control device 200 may identify whether the random value provided by the control device 200 is identical to the random value obtained from the terminal 100. If the random values ​​are identical to each other, the control device 200 may identify that the terminal 100 has received the advertising packet broadcast by the control device 200. In addition, according to an embodiment, the random value may be included in the advertising packet independently of the encrypted authentication data, in which case the random value may be included in the advertising packet without being encrypted, different from the encrypted authentication data.

[0141] Additionally, in an embodiment, the terminal 100 may add an encryption key of the terminal 100 (e.g., a public key of the terminal 100) to the advertising packet. The encryption key of the terminal 100 may be used to decrypt encrypted authentication data included in the advertising packet. Additionally, according to an embodiment, the encryption key of the terminal 100 may be included in the advertising packet independently of the encrypted authentication data, in which case the encryption key of the terminal 100 may be included in the advertising packet without being encrypted, unlike the encrypted authentication data.

[0142] The terminal 100 may broadcast an advertising packet, and the control device 200 may receive the advertising packet from the terminal 100 if the control device 200 is located at a predetermined distance from the terminal 100 .

[0143] In addition, the control device 200 may decrypt the encrypted authentication data and perform user authentication. In an embodiment, the control device 200 may decrypt the encrypted authentication data included in the advertising packet by using an encryption key (e.g., a public key of the terminal 100) of the terminal 100. For example, the encryption key of the terminal 100 may be included in the advertising packet transmitted from the terminal 100. In addition, the encrypted authentication data may be encrypted by the terminal 100 based on the public key of the control device 200 together with the private key of the terminal 100. The control device 200 may decrypt the encrypted authentication data by using a private key corresponding to the public key of the control device 200 together with the public key of the terminal 100 included in the advertising packet.

[0144] In addition, the control device 200 may verify the validity of the authentication data based on the random value. As described above, the random value may be included in the authentication data or may be included in the advertising packet independently of the authentication data. The control device 200 may determine whether the random value received from the terminal 100 matches the random value included in the advertising packet previously broadcast by the control device 200, and if the random values ​​match each other, the control device 200 may determine that the authentication data received from the terminal 100 is valid. If the random values ​​do not match each other, the control device 200 may determine that the authentication data received from the terminal 100 is not valid and may determine that the user has not been authenticated.

[0145] In addition, the control device 200 may verify the validity of the authentication data based on the identification information (UUID) included in the advertising packet. The control device 200 may determine whether the identification information (UUID) included in the advertising packet received from the terminal 100 matches the identification information of the control device 200 included in the advertising packet previously broadcast by the control device 200, and if the identification information matches, the control device 200 may determine that the authentication data received from the terminal 100 is valid. If the identification information does not match, the control device 200 may determine that the authentication data received from the terminal 100 is not valid and may determine that the user has not been authenticated.

[0146] In addition, the control device 200 may verify the validity of the authentication data based on the signature information included in the authentication information. As described above with reference to FIG. 5, the control device 200 may obtain the control device-specific encryption key provided by the server 300 through the terminal 100 in the registration process of the control device 200. The control device 200 may verify the signature information included in the authentication information by using the control device-specific encryption key. For example, the server 300 may generate the signature information of the control device 200 by using the control device-specific public key assigned to the control device 200, and may transmit the generated signature information to the terminal 100. The terminal 100 may include the signature information received from the server 300 in the authentication information, and may transmit encrypted authentication data including the authentication information to the control device 200. In addition, the control device 200 may decrypt the authentication data, may identify the signature information extracted from the authentication data, and may verify the signature information by using the control device-specific public key. For example, the control device 200 may verify the signature information by using a digital signature algorithm (DSA). If the verification result indicates that the signature information is valid, the control device 200 may determine that the authentication data received from the terminal 100 is valid. On the other hand, if the verification result indicates that the signature information is not valid, the control device 200 may determine that the authentication data received from the terminal 100 is not valid and may determine that the user has not been authenticated.

[0147] In addition, the control device 200 may perform user authentication based on the authentication information included in the decrypted authentication data. For example, if the authentication information includes a password or an authentication key, the control device 200 may determine whether the password or authentication key included in the authentication data matches a pre-stored password or authentication key, and if the password or authentication key matches, the control device 200 may determine that the user is authenticated. Determining that the user is authenticated may indicate that the control device 200 has determined that the terminal 100 or a user of the terminal 100 has the authority to access the target area.

[0148] In addition, the control device 200 may include information regarding the result of user authentication in an advertising packet and may broadcast the advertising packet. When the terminal 100 is located at a predetermined distance from the control device 200, the terminal 100 may acquire the advertising packet and may acquire information regarding the result of user authentication included in the advertising packet. In addition, the terminal 100 may transmit the result of user authentication received from the control device 200 to the server 300.

[0149] As described above, the terminal 100 transmits the authentication data by using an advertising packet, so that the number of packet transmissions between the terminal 100 and the control device 200 can be reduced compared to the case where the authentication data is transmitted through a communication channel. Accordingly, the speed of user authentication can be improved. In addition, when the operating system of the terminal 100 is Android (registered trademark) and the scan start, communication connection, and scan interruption are repeated, the operating system may prohibit the scan in the terminal 100 for a predetermined time. In this case, the communication connection is not established for the predetermined time, and therefore the terminal 100 cannot transmit the authentication data to the control device 200, and accordingly, the user authentication may be interrupted. However, when the terminal 100 transmits the authentication data by using an advertising packet, the user authentication may be completed in the scan start state, and the scan may not be prohibited, and accordingly, the time required to perform the user authentication may be shortened. That is, when the operating system of the terminal 100 is iOS (registered trademark), the terminal 100 that transmits authentication data through a communication channel may be effective in user authentication, whereas the terminal 100 that transmits authentication data by using advertising packets may be effective in user authentication even when the operating system of the terminal 100 is Android as well as iOS.

[0150] FIG. 8B illustrates the operation of the terminal 100 and the control device 200 when the authentication data is transmitted by using the communication channel. In FIG. 8B, if the version of the communication protocol is not a version that supports a large-sized advertising packet to include encrypted authentication data in the advertising packet, i.e., if the version of the BLE communication protocol is lower than 5.0, the terminal 100 may establish a communication channel with the control device 200 without using an advertising packet, and may transmit the encrypted authentication data to the control device 200 through the communication channel. Specifically, the terminal 100 may perform a scan and may connect to the control device 200 as described above, and a communication channel may be established between the terminal 100 and the control device 200 accordingly. The terminal 100 may transmit more data of various sizes to the control device 200 through the communication channel, and may generate a data packet including the encrypted authentication data accordingly, and may transmit the generated data packet to the control device 200.

[0151] In addition, the terminal 100 may transmit the random value described above to the control device 200 through a communication channel. For example, the terminal 100 may include the random value in a data packet and transmit the data packet to the control device 200.

[0152] In addition, the terminal 100 may transmit an encryption key of the terminal 100 (e.g., a public key of the terminal 100) to the control device 200 through a communication channel. For example, the terminal 100 may include an encryption key of the terminal 100 (e.g., a public key of the terminal 100) in a data packet and transmit the data packet to the control device 200.

[0153] In addition, the control device 200 may decrypt the encrypted authentication data and perform user authentication. The contents described in Fig. 8A may be applied to the decryption of the encrypted authentication data and the user authentication, and therefore detailed description is omitted.

[0154] In addition, the control device 200 may provide information regarding the result of user authentication to the terminal 100 through a communication channel. The control device 200 may generate a data packet including information regarding the result of user authentication and send the generated data packet to the terminal 100. In addition, the control device 200 may send the information regarding the result of user authentication to the terminal by writing.

[0155] In addition, the control device 200 may include information regarding the result of user authentication in an advertising packet and may broadcast the advertising packet. When the terminal 100 is located at a predetermined distance from the control device 200, the terminal 100 may acquire the advertising packet and may acquire information regarding the result of user authentication included in the advertising packet. In addition, the terminal 100 may transmit the result of user authentication received from the control device 200 to the server 300.

[0156] For example, if multiple control devices 200 are located in a company and the user of the terminal 100 is a staff member of the company, the terminal 100 or the server 300 may execute commuting time recording for the user of the terminal 100. Specifically, rules regarding commuting time recording may be set in the terminal 100 or the server 300. For example, the terminal 100 or the server 300 may set a predetermined work arrival time zone and a predetermined work departure time zone in advance. For example, the terminal 100 or the server 300 may set the time zone from 5:00 a.m. to 10:00 a.m. as the work arrival time zone, and the time zone from 5:00 p.m. to 5:00 a.m. the next day as the work departure time zone.

[0157] In an embodiment, when the terminal 100 executes commuting time recording for the user of the terminal 100, the terminal 100 may execute clock-in recording for the user of the terminal 100 based on the advertising signal or user authentication result first received from the control device 200 in a preset clock-in time period. For example, in a preset clock-in time period from 5:00 a.m. to 10:00 a.m., if the terminal 100 receives an advertising signal at 6:00 a.m. and then at 9:00 a.m., the terminal 100 may record 6:00 a.m. as the user's clock-in time. In addition, if the terminal 100 receives a user authentication result from the control device 200 at 7:00 a.m. and then at 10:00 a.m., the terminal 100 may record 7:00 a.m. as the user's clock-in time. In addition, the terminal 100 may execute clock-out recording for the user of the terminal 100 based on the advertising signal or user authentication result last received from the control device 200 in a preset clock-out time period. For example, if the terminal 100 receives an advertising signal at 6 PM and then receives another advertising signal at 9 PM during a preset work-stop time period from 5 PM to 5 AM the next day, the terminal 100 may record 9 PM as the user's work-stop time. In addition, if the terminal 100 receives a user authentication result from the control device 200 at 8 PM and then receives it again at 1 AM the next day, the terminal 100 may record 1 AM the next day as the user's work-stop time.

[0158] In addition, in the embodiment, when the commuting time record for the user of the terminal 100 is executed by the server 300, the server 300 may execute the clock-in record for the user of the terminal 100 based on the encryption key request of the control device 200 or the user authentication result received for the first time from the terminal 100 in a preset clock-in time slot. For example, in a preset clock-in time slot from 5:00 a.m. to 10:00 a.m., if the server 300 receives the encryption key request of the control device 200 from the terminal 100 at 6:00 a.m. and receives it again at 9:00 a.m., the server 300 may record 6:00 a.m. as the clock-in time of the user. In addition, if the server 300 receives the user authentication result from the terminal 100 at 7:00 a.m. and then receives it again at 10:00 a.m., the server 300 may record 7:00 a.m. as the clock-in time of the user. In addition, the server 300 may execute the clock-out record for the user of the terminal 100 based on the encryption key request of the control device 200 or the user authentication result received last from the terminal 100 in a preset clock-out time slot. For example, in a preset work-stop time period from 5 PM to 5 AM the following day, if the server 300 receives an encryption key request for the control device 200 from the terminal 100 at 6 PM and then receives it again at 9 PM, the server 300 may record 9 PM as the user's work-stop time. In addition, if the server 300 receives a user authentication result from the terminal 100 at 8 PM and then receives it again at 1 AM the following day, the server 300 may record 1 AM the following day as the user's work-stop time.

[0159] In addition, when managing access, the terminal 100 may perform anti-pass back (APB) control with respect to the user of the terminal 100. For example, when multiple control devices are provided, the third control device may be configured to control an entrance from the outside to the inside of the target area, and the fourth control device may be configured to control an exit from the inside of the target area to the outside. The third control device and the fourth control device perform the above-described operations of the control device 200, and therefore a detailed description thereof will be omitted.

[0160] In addition, the server 300 may configure the third control device to control an entrance from the outside to the inside, and the fourth control device to control an exit from the inside to the outside. For example, the server 300 may configure the roles of the third control device and the fourth control device by controlling the settings from the outside. In addition, as described above with reference to FIG. 5, in the process of registration, the third control device may transmit the encryption key of the third control device to the terminal 100 while transmitting information regarding the role of controlling the entrance of the third control device. In addition, the terminal 100 may transmit the encryption key of the third control device to the server 300 while transmitting information regarding the role of controlling the entrance of the third control device, and the server 300 may configure the role of the third control device according to the received information. In addition, the role of the fourth control device may be configured in the server according to the same operation as described above.

[0161] As described above with reference to FIG. 6, the terminal 100 may perform anti-passback control while determining whether the terminal has the authority to access the target area. In this case, the server 300 may transmit information regarding the role of the third control device or the fourth control device while transmitting the encryption key of the control device to the terminal 100. For example, the terminal 100 may receive an advertising signal from the third control device, may request the encryption key of the third control device from the server 300, and may receive information regarding the role of the third control device while receiving the encryption key of the third control device from the server 300. In addition, the terminal 100 may determine whether the role of the control device accessed by the terminal 100 immediately before is the same as the role of the third control device. For example, the terminal 100 may access the fourth control device immediately before. For example, the terminal 100 may receive a user authentication result from the fourth control device indicating that the user has been authenticated. In this case, in the process of accessing the fourth control device, the terminal 100 may receive information on the role of the fourth control device from the server 300, and may identify that the fourth control device performs a role of controlling the exit based on the information on the role of the fourth control device. In addition, the terminal 100 may identify that the third control device performs a role of controlling the entrance by receiving information on the role of the third control device from the server 300, and may accordingly determine that the role of the fourth control device accessed by the terminal immediately before is not the same as the role of the third control device. Accordingly, the terminal 100 may determine that the user of the terminal 100 does not violate the anti-passback policy, and if it is determined that the terminal 100 has the authority to access the target area as a result of determining whether the terminal 100 has the authority to access the target area in FIG. 6, the terminal 100 may access the third control device. For example, the terminal 100 may determine whether to send authentication data to the third control device.

[0162] On the other hand, the terminal 100 may access a third control device or another control device that immediately before performs the role of controlling the entrance. For example, the terminal 100 may receive a user authentication result indicating that the user has been authenticated from the control device that performs the role of controlling the entrance. In this case, in the process of accessing the control device that performs the role of controlling the entrance, the terminal 100 may receive information about the role of the control device that performs the role of controlling the entrance from the server 300, and may identify that the control device that performs the role of controlling the entrance performs the role of controlling the entrance based on the information about the role of the control device that performs the role of controlling the entrance. In addition, the terminal 100 may identify that the third control device performs the role of controlling the entrance by receiving information about the role of the third control device from the server 300, and accordingly, the terminal 100 may determine that the role of the control device that performs the role of controlling the access, which the terminal 100 immediately before accessed, is the same as the role of the third control device. In response, the terminal 100 may determine that the user of the terminal 100 has violated the anti-passback policy, and may determine that the user does not have the authority to access the target area even if the user has the authority to access the target area as a result of determining the presence or absence of the authority to access the target area in Fig. 6, and may not access the third control device. For example, the terminal 100 may not transmit authentication data to the third control device.

[0163] The method according to the embodiment may be implemented in the form of program commands executed by various computer means and may be recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, alone or in combination. The program commands recorded on the medium may be specially designed and constructed for the embodiment, or may be well known and usable by those skilled in the art of computer software. Examples of computer-readable recording media may include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs, DVDs, magneto-optical media such as floptical disks, and hardware devices such as ROMs, RAMs, flash memories, etc. that are specially configured to store and execute program commands. Examples of program commands may include not only machine language codes created by a compiler, but also high-level language codes executed by a computer by using an interpreter. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiment, or vice versa.

[0164] As described above, although the embodiments have been described with reference to the specified embodiments and drawings, various modifications and changes may be made by those skilled in the art from the above description. For example, suitable results may be achieved even if the techniques described above are performed in an order different from that described above, and / or the components of the systems, structures, devices, circuits, etc. described above are combined or combined in a manner different from that described above, or are replaced or substituted with other components or equivalents.

[0165] Accordingly, other implementations, other embodiments, and equivalents within the scope of the claims set forth below are within the scope of the claims.

Claims

1. 13. A method for authenticating a terminal, comprising: receiving a first advertising packet from a control device, wherein the first advertising packet includes at least one of a control device identification for identifying the control device or a region identification for identifying a target region managed by the control device; requesting an encryption key for the control device from a server based on at least one of the control device identification information or the area identification information included in the first advertising packet; receiving the encryption key of the control device from the server; determining whether the terminal has authority to access the target area based on at least one of the control device identification information or the area identification information; If it is determined that the terminal has the authority to access the region of interest, encrypting authentication data to be transmitted to the control device based on the encryption key of the control device; and transmitting said encrypted authentication data to said control device. An authentication method comprising:

2. The method of authentication of claim 1 , wherein the cryptographic key of the control device is a public key of the control device.

3. 3. The authentication method according to claim 1 or 2, wherein the step of determining whether the terminal has the authority to access the target area includes a step of determining whether the terminal has the authority to access the target area by comparing at least one of the control device identification information or the area identification information with reference access authority information pre-stored in the terminal, and the reference access authority information includes at least one of area identification information of an area that the terminal has authority to access, or device identification information of the control device that manages the area that the terminal has authority to access.

4. The authentication method of claim 2 , wherein the step of encrypting comprises the step of encrypting the authentication data by using the public key of the control device and a private key of the terminal.

5. The authentication method according to claim 1 or 2, wherein the first advertising packet includes version information of a communication protocol through which the control device communicates with the terminal.

6. The authentication method of claim 5 , wherein the step of transmitting the encrypted authentication data to the control device includes determining a method for transmitting the encrypted authentication data to the control device based on the version information of the communication protocol.

7. The step of transmitting the encrypted authentication data to the control device comprises: generating a second advertising packet including the encrypted authentication data based on the version information of the communication protocol when it is determined that the advertising packet according to the version information of the communication protocol can include the encrypted authentication data; and transmitting the second advertising packet to the control device. The method of claim 6, comprising:

8. The authentication method according to claim 7 , wherein the second advertising packet includes the control device identification information.

9. The step of transmitting the encrypted authentication data to the control device comprises: when it is determined that an advertising packet according to the version information of the communication protocol cannot include the encrypted authentication data, establishing a communication connection with the control device based on the version information of the communication protocol; generating a data packet including the encrypted authentication data after the step of establishing the communication connection with the control device; and transmitting said data packet to said control device. The method of claim 6, comprising:

10. The step of transmitting the encrypted authentication data to the control device comprises: determining a distance to the control device based on a signal received from the control device; and transmitting the encrypted authentication data to the control device if the determined distance is less than or equal to a threshold distance. The authentication method according to claim 1 or 2, comprising:

11. The step of transmitting the encrypted authentication data to the control device comprises: the terminal identifies that the control device is registered with the server to apply a first threshold distance and, if the determined distance is less than or equal to the first threshold distance, transmits the encrypted authentication data to the control device. The method of claim 10, comprising:

12. The step of transmitting the encrypted authentication data to the control device comprises: transmitting the encrypted authentication data to the control device if the terminal identifies that the control device is not registered with the server for applying the first threshold distance and if the determined distance is less than or equal to a second threshold distance that is less than the first threshold distance. The method of claim 11, comprising:

13. obtaining the encryption key of the control device from the control device prior to the receiving a first advertising packet from the control device; and transmitting the encryption key of the control device to the server so that the encryption key of the control device is registered on the server; The method of authentication according to claim 11, further comprising:

14. receiving, in response to the encryption key of the control device being transmitted to the server, from the server, at least one of a control device-specific encryption key assigned to the control device by the server or login information to the server; and transmitting at least one of the control device dedicated encryption key or the login information to the server to the control device; The method of claim 13 further comprising:

15. The authentication method according to claim 1 or 2, further comprising the step of receiving information from the control device regarding a user authentication result based on the encrypted authentication data.

16. Information regarding a predetermined working time period is preset, A time when an advertising signal received earlier from the first advertising signal received from the control device or the advertising signal received from the second control device during the predetermined working time period is received is set as the working time of the user of the terminal; or During the predetermined working time period, the time when information on the user authentication result received from the control device or the information on the user authentication result received from the second control device is received earlier is set as the working time of the user of the terminal. The authentication method according to claim 15.

17. Information regarding a predetermined time period for leaving work is preset, A time when the later of the first advertising signal received from the control device and the advertising signal received from the second control device during the predetermined time period is received is set as the time when the user of the terminal leaves work; or During the predetermined time slot, the time when the information on the user authentication result received from the control device or the information on the user authentication result received from the second control device that is received later is set as the time when the user of the terminal is to leave work. The authentication method according to claim 15.

18. receiving information from the server in response to a request for the encryption key of the control device regarding a role of the control device, where the role of the control device includes controlling an entrance from an outside to an inside of the target area or controlling an exit from the inside of the target area to the outside; determining whether the role of the control device last accessed by the terminal is the same as the role of the control device based on the information regarding the role of the control device; and determining that the terminal does not have authority to access the target area if it is determined that the role of the control device previously accessed by the terminal is the same as the role of the control device; The authentication method according to claim 1 or 2, further comprising:

19. A program for causing a computer to execute the authentication method according to claim 1 or 2.

20. A communication unit; and Control Unit 11. A terminal comprising: receiving a first advertising packet from a control device through the communication unit, where the first advertising packet includes at least one of control device identification information for identifying the control device or area identification information for identifying a target area managed by the control device; requesting an encryption key of the control device from a server through the communication unit based on at least one of the control device identification information or the area identification information included in the first advertising packet; receiving the encryption key of the control device from the server via the communication unit; determining whether the terminal has authority to access the target area based on at least one of the control device identification information or the area identification information; If it is determined that the terminal has the authority to access the target area, encrypting authentication data to be transmitted to the control device based on the encryption key of the control device; and Transmitting the encrypted authentication data to the control device through the communication unit. It is configured as follows: Terminal.

Images