Maintenance security system for public facilities
Patent Information
- Application Number
- KR1020250047634
- Authority / Receiving Office
- KR · KR
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2025-04-11
- Publication Date
- 2026-10-21
Smart Images
Figure PAT00003_ABST
Abstract
Description
Technology Field
[0001] The present invention relates to an electronic access control system for the maintenance of public service facilities distributed over a wide area (e.g., traffic signal controllers, bus information systems, etc.), and more specifically, to a security system for the maintenance of public facilities that enables maintenance personnel, who maintain control enclosures controlling facilities operated by local governments or the state, or internal network communication systems of public institutions, to conveniently access the target object and respond appropriately to emergencies, while enhancing security and fundamentally blocking the illegal use of door keys or access by hackers. Background Technology
[0002] The government and local municipalities install and operate numerous control enclosures in various locations to provide public services. Recently, there has been a rapid increase in unmanned facilities, including not only particularly expensive control systems but also internal network communication systems for public institutions. Consequently, the number of maintenance service companies and engineers is also growing to perform maintenance tasks for these facilities.
[0003] Furthermore, maintenance operations involve various types of on-site tasks that may require emergency response depending on the situation or immediate repairs. Since these on-site tasks necessitate physical access to service facilities, maintenance engineers must use the keys to open and close control cabinet doors; however, this can lead to various problems, such as the inconvenience of managing door keys, excessive follow-up work and costs associated with lost keys, the ease of key duplication and unauthorized use leading to potential illegal misappropriation, the theft or damage of expensive control devices, and the emergence of hackers accessing internal communication networks of public institutions for malicious purposes.
[0004] Registered Patent 10-1376279 (Title of Invention: Electronic Security Locking System for Ground Equipment Enclosures) (hereinafter referred to as the "prior art") was developed to solve these problems and is a technology developed to unlock the door of the enclosure through authentication when a request is made by a mobile terminal upon approach.
[0005] FIG. 1 is a block diagram illustrating the overall configuration of the prior art.
[0006] In the prior art, the electronic security management system consists of a security locking device (100) installed in an enclosure (10), a portable terminal (200), and a management server (400). Multiple ground facilities within a management area are managed by a single management server (400). The management area is a
[0007] It can be set at the national or district level. A security locking device (100) for locking and unlocking the door is installed in each enclosure (10) of the ground equipment. A unique ID is assigned to each security locking device (100), and the management server (400) identifies and manages the security locking device (100) using the unique ID. The security locking device (100) is equipped with a mechanical locking unit that is locked and unlocked by a security key, and an electronic locking unit that is electronically locked and unlocked when the electronic tag (210) of the portable terminal (200) approaches.
[0008] Additionally, the mobile terminal (200) has an embedded electronic tag (210), and a security code is stored in the electronic tag (210). The security code is an authentication code for operating the security lock device (100) and is an electronically readable and writable encryption code. The mobile terminal (200) further includes a facility management application (220). The facility management application (220) is software installed on the mobile terminal (200) and is intended to allow a facility manager to obtain access permission to ground facilities, manage the Read / Write of the electronic tag (210), and transmit facility management information to the management server (400). When a request is made by the mobile terminal (200), the management server (400) issues a security code through an authentication process and transmits it to the mobile terminal (200). Additionally, it updates the security code for the ground facilities using the new security code received from the mobile terminal (200).
[0009] The management server (400) is equipped with a security code management DB that updates, stores, and manages security codes for each security lock device (100), a security history management DB that stores and manages access permission information and user information for a mobile terminal (200) that issued a security code, and a security lock device management DB that stores and manages facility management information such as door opening / closing information and ground equipment status information for each security lock device (100).
[0010] Additionally, the security code generation unit of the security lock device (100) removes a security code that has been used once, generates a new security code, and writes it to the electronic tag (210) of the mobile terminal (200). The new security code written in this way is encrypted so that it is not exposed to the user of the mobile terminal (200). The facility management application (220) of the mobile terminal (200) automatically relays the new security code written by the security lock device (100) to the management server (400) via a broadband mobile communication network. The management server (400) updates the security code for the corresponding ground facility by combining the new security code transmitted from the mobile terminal (200), or a code generated internally with the new security code.
[0011] In the prior art as described above, the security lock device (100) is unlocked after a security code is input from a mobile terminal (200), and the security code generation unit of the security lock device (100) removes the security code that has been used once and generates a new security code, which is then recorded on the electronic tag (210) of the mobile terminal (200). The security code recorded on the electronic tag (210) is transmitted to a management server (400) in a state where the user cannot recognize it. However, if the user has a hacking intention, the new security code recorded by the security code generation unit of the security lock device (100) that is input into the electronic tag (210) can be very easily obtained.
[0012] In such cases, the security of the actual security lock device (100) is not established, and a problem arises in which the user can unlock the security lock device (100) at will using the security code obtained by fraud.
[0013] Therefore, regarding facilities, especially those used for public purposes, there is an urgent need for new management during the maintenance of facilities with enhanced security. The problem to be solved
[0014] The present invention has been devised in consideration of these problems, and the objective of the present invention is to provide a security system for the maintenance of public facilities with enhanced security for the user of a mobile terminal by generating a new security code on a management server, encrypting it, and transmitting it to the user's mobile terminal and the security lock when a security code is used in the security lock, and by decrypting the encrypted security code transmitted to the mobile terminal in the security lock to unlock it.
[0015] Another solution of the present invention provides a security system that automatically generates, issues, and manages access rights to security locks by considering the work schedules and site locations of maintenance personnel, and aims to maximize the efficiency of overall maintenance work by ensuring work continuity and convenience in maintenance environments where access to multiple facilities is required. means of solving the problem
[0016] A means of the present invention for solving the above problem comprises a control box in which a control device for controlling public facilities is housed and a door is opened and closed by an electronic door opening and closing device, a mobile phone used by a maintenance worker who maintains the control box, and a central control center that generates a permission code (PC) to unlock the electronic door opening and closing device of the control box upon a request from the mobile phone and transmits it to the mobile phone, wherein the central control center comprises a control module that controls the central control center and is responsible for the OS (Operating System), a facility maintenance and security information management module that includes facility information regarding the control boxes and a key number (Key No) of the electronic door opening and closing device, a facility access information management module that maintains and manages data for managing the maintenance worker's access rights, a communication module that transmits a facility security app upon a request from the maintenance worker's mobile phone and transmits and receives data through the facility security app, and a permission code (PC) generation module that generates the permission code (PC). The above mobile phone includes a validity determination means for determining whether the authorization code (PC) transmitted from the above central control center is valid information, an encryption key code generation means for generating a one-time encryption key code (SKC) when it is determined to be a valid authorization code (PC) by the validity determination means, and an encryption key code (SKC) transmission means for transmitting the encryption key code (SKC) generated from the encryption key code generation means to the control housing. The control housing includes an encryption key code (SKC) extraction means for extracting an encryption key code (SKC) from the encryption key code (SKC) transmitted from the encryption key code (SKC) transmission means, a decryption means for decrypting the encryption key code (SKC) extracted from the encryption key code (SKC) extraction means to extract a key number (Key-No), and an electronic release module for releasing the electronic door opening / closing device when the key number (Key-No) extracted from the decryption means matches a pre-stored key number (Key-No).
[0017] In addition, in the present invention, the permission code (PC) includes time information when a specific maintenance person accesses a specific control unit, and it is preferable that the validity determination means determines whether the time information corresponds to legitimate time information when the specific maintenance person accesses the specific control unit.
[0018] In addition, in the present invention, it is preferable that the encryption key code (SKC) transmission means be implemented by NFC (Near Field Communication).
[0019] In addition, in the present invention, the facility maintenance and information management module of the central control center includes GPS location information of each control box, and further includes a scheduling module that determines a route for determining the order of maintenance of the multiple control boxes when one maintenance worker maintains multiple control boxes, and it is preferable that the scheduling module transmits access time information for accessing each control box to the authorization code (PC) generation module when the one maintenance worker accesses the multiple control boxes along the route.
[0020] In addition, in the present invention, the facility maintenance and information management module stores the time required for maintenance, the facility access information management module stores the proficiency of each maintenance worker, and the scheduling module determines the route by deep learning according to the time required for maintenance and the proficiency of the maintenance worker.
[0021] In addition, in the present invention, it is preferable that the validity determination means determines that the result is valid when the GPS location information of the accessed control unit and the GPS location information of the mobile phone are within a preset error range when the one maintenance worker approaches the plurality of control units along the route.
[0022] In addition, in the present invention, it is preferable that the validity determination means determines that the result is valid when the maintenance worker's access time and the access time information are within a preset error range when the maintenance worker accesses the plurality of control housings along the route. Effects of the invention
[0023] According to the present invention having the above-mentioned problem and means of solution, the encryption key code (SKC) entered into the facility security app loaded on the mobile phone of a maintenance worker includes time information, and after the validity of this time information is determined, the encryption key code is transmitted to the control unit, thereby allowing an authorized maintenance worker to perform maintenance within a valid time, thus having the effect of enhancing security.
[0024] In addition, according to the present invention, when a maintenance worker repairs multiple control boxes, on-site work efficiency is dramatically improved through automated authorization based on work flow and time, and problems such as duplicate visits, sequence errors, and lost keys can be fundamentally eliminated. Brief explanation of the drawing
[0025] FIG. 1 is a block diagram illustrating the overall configuration of the prior art. FIG. 2 is an overall configuration diagram for explaining an embodiment of the present invention. FIG. 3 is a block diagram illustrating the overall configuration of the present invention. FIG. 4 is a block diagram illustrating the configuration of the control housing of the present invention. FIG. 5 is a flowchart illustrating the overall flow of the present invention. FIG. 6 is a block diagram illustrating another embodiment of the present invention. Specific details for implementing the invention
[0026] Hereinafter, embodiments of the present invention will be described in detail with reference to the attached drawings.
[0027] FIG. 2 is an overall configuration diagram for explaining an embodiment of the present invention, and FIG. 3 is a block diagram explaining the overall configuration of the present invention.
[0028] The system of the present invention comprises a control box (3) in which a control device for controlling ITS facilities such as a traffic signal controller box, national roads / highways, etc., is housed inside and the door is opened and closed by an electronic door opening / closing device, a control box (3) for managing and controlling public or private facilities such as urban bus information guidance facilities and unmanned operation facilities, a mobile phone (2) used by a maintenance worker who maintains the control box (3), and a central control center (1) that generates and transmits a permission code (PC) according to a request from the mobile phone (2).
[0029] The central control center (1) is equipped with a UI that allows administrator access and enables data input and output, and is equipped with an administrator UI and a control module (11) that controls the entire system and is responsible for the OS (Operating System); a facility maintenance and security information management module (12) that stores and manages facility enclosure IDs, locking device 'Key No' installed in the facility enclosure, information related to the location and contents of the enclosure, and maintenance performance history data; a facility access information management module (13) that stores and manages maintenance personnel registration and ID management, maintenance application and permission management, door key transmission log data management, and door on-off status information history management; a communication module (14) that transmits and receives a facility security app (App) when there is a request from a maintenance worker's mobile phone (or user's mobile phone) and transmits and receives data through the app; and an authorization code (PC) generation module (15) that generates an authorization code (PC).
[0030] When the central control center (1) receives a request for a permission code from the maintenance worker's mobile phone (2) through the communication module (14), the permission code (PC) generation module (15) runs a permission code algorithm (PCA: Permission Code Algorithm) that generates a permission code (PC) based on time, key number, and authorized user ID, and creates a permission code to be sent to the maintenance worker who requested the opening.
[0031] This authorization code includes time-related information, allowing the maintenance operator to determine the validity of the authorization code (PC) from the 'Facility Security-App' installed on the mobile phone.
[0032] In addition, a facility security app is installed on the maintenance worker's mobile phone, and after accessing a specific control box (3), the worker requests the central control center (1) to transmit a permission code (PC) that can unlock the electronic door opening / closing device of the control box (3). When the permission code (PC) is received, the time information, key number, and agent ID are extracted from the permission code (PC) by running a permission code algorithm (PCA: Permission-Code Algorithm), and the permission code (PC) validity verification algorithm (PCVA: Permission-Code Validation Algorithm) is run to verify whether the information is valid based on the extracted time information and the maintenance worker's ID, thereby determining whether the permission code (PC) is valid.
[0033] The authorization code (PC) validity verification algorithm determines the validity of access when a specific maintainer accesses a specific control enclosure by determining whether the specific maintainer is using a legitimate ID and has legitimately accessed the control enclosure instructed to be maintained, and by determining whether the access is being made within the time information, which is the permitted time period.
[0034] When the authorization code (PC) is determined to be valid, a one-time encryption key code (SKC) is generated by using the key number and the random number (RN) obtained from the random function as the seed value of the Scrambled Random Key-Code Algorithm (SRKCA).
[0035] The 'SRKCA' encryption random key code algorithm is a function ' heart Let it be ()', and its inverse function, that is, the restoring function heart-1 When it was said that (),
[0036] The generation and recovery operations of the 'Encryption Key Code (SKC)' are as follows:
[0037] Mathematical Formula 1: Encryption Key Code Generation Process (Mobile Phone Side Calculation Details)
[0038] srkca(Key-No, RN) = SKC
[0039] (However, RN is a new random number of 10 digits or more, and Key-No is the lock key number)
[0041] Mathematical Formula 2: Key Number Restoration Process (Operation Details on the Locking Device Side)
[0042] srkca -1 (SKC) = (Key-No, RN)
[0044] The SKC term in mathematical formulas 1 and 2 is the part that is actually transmitted via NFC communication. In the above formula, even if the Key-No is constant, since the 'RN' value is a random number that is newly generated every time the Key-No is generated, the SKC value is always created as a new value when transmitted externally.
[0045] FIG. 4 is a block diagram illustrating the configuration of the control housing of the present invention.
[0046] The control housing (3) of the present invention is equipped with a controller (30) for unlocking the electronic door opening / closing device of the housing, and the controller (30) controls the target of control and includes a control module (31) responsible for the OS (Operating System), an NFC module (32) that receives a signal transmitted from the NFC of a mobile phone (2), performs signal processing to extract an encryption key code (SKC), a redundancy check module (33) that determines redundancy by comparing the SKC extracted from the NFC module (32) with previous SKCs stored in advance, a decryption module (34) that extracts a key number (Key-No) by decrypting the SKC input from the redundancy check module (33) if it is determined to be a newly updated SKC, and an electronic unlocking module (35) that opens the electronic door opening / closing device of the housing when the key number extracted from the decryption module (34) matches a genuine key number stored in advance.
[0047] FIG. 5 is a flowchart illustrating the overall flow of the present invention.
[0048] A maintenance user (user) must open the door of a control housing (3) to access and perform maintenance on a specific control housing (3). To do this, the maintenance user must transmit an encryption key code (SKC) to the controller (30) of the control housing (3) via the NFC of their mobile phone (2).
[0049] To this end, the maintenance worker accesses the central control center (1), activates the facility security app on the downloaded mobile phone (2), logs in, and requests access permission to the central control center (1).
[0050] The administrator of the central control center compares the stored permission conditions with the conditions of the maintenance worker who requested access permission, and if the permission conditions are satisfied, the permission code (PC) generation module (15) generates a permission code (PC) and transmits it to the facility security app.
[0051] The facility security app reviews time-related information stored in the authorization code (PC) to determine validity based on whether the preset time has been exceeded, and if it is determined to be valid, it generates an encryption key code (SKC) according to mathematical formula 1 and transmits it to the control unit (3) via NFC communication.
[0052] When the encryption key code (SKC) is received from the control unit (3), the electronic door opening / closing device is opened by the operation of the controller (30) shown in Fig. 4.
[0053] FIG. 6 is a block diagram illustrating another embodiment of the present invention.
[0054] The embodiment illustrated in FIG. 6 is intended to provide a security system that automatically generates, issues, and manages access rights to control boxes by supplementing and improving the central control center (1) illustrated in FIG. 3, taking into account the work schedule and site location of maintenance personnel, and the same reference numerals are used for identical components. In addition, it is intended to ensure work continuity and convenience in a maintenance environment where one maintenance worker is required to access multiple facilities, thereby maximizing the efficiency of overall maintenance work while enhancing security so as not to harm the public interest.
[0055] When multiple maintenance personnel perform maintenance work on multiple control enclosures, appropriate distribution must be made, and in such cases, the facility maintenance and security information management module (12) includes, in addition to the facility enclosure ID, the locking device 'Key No' installed on the facility enclosure, information related to the enclosure location and contents, and maintenance performance history data, GPS information, information on the time required for maintenance, etc.
[0056] In addition, when a maintenance worker inputs the locations of control boxes they wish to maintain through the facility security app and transmits them to the central control center (1), the scheduling module (16) of the central control center (1) transmits route information that determines the order of control boxes that a specific maintenance worker must sequentially manage for maintenance. At this time, the route information includes the GPS information of each control box to be maintained, the access time information permitted for maintenance, etc., which are scheduled and stored, and the route information is transmitted to the maintenance worker's facility security app.
[0057] The scheduling module (16) can generate a route using various methods, such as a method of creating an optimal route by learning from data collected by a deep learning method, in addition to a method of designating control boxes to be visited according to the route desired by the maintenance worker, and a method of creating an optimal route by considering the skill level of multiple maintenance workers and the difficulty of maintaining the control boxes.
[0058] In addition, the embodiment illustrated in FIG. 6 is equipped with a GPS receiving module (17) that extracts time information and GPS information from data transmitted from a mobile phone's facility security app, and a scheduling module (16) stores GPS information and access time information of each control box on the route that a maintenance worker must visit. When a maintenance worker accesses a specific control box and requests an authorization code (PC), the authorization code (PC) generation module (15) compares the GPS information of the specific control box stored in the scheduling module (16) with the access authorization time information to encrypt the authorization code (PC) and transmit it to the facility security app. The facility security app compares the GPS information of the mobile phone with the GPS information of the control box of the maintenance target included in the route information, performs a review to check whether the error range is within a preset range, and determines validity information to check whether the access time corresponds to an error range preset in the access time information. If valid, it transmits an encryption key number to the control box (3) via NFC communication.
[0059] As such, the embodiment of the present invention illustrated in FIG. 6 applies the same basic principles as the embodiments illustrated in FIG. 2 and 3, such as the generation of a permission code (PC) and the generation of a random key code, but resolves the waste of manpower caused by various maintenance personnel accessing multiple control boxes to repair them, and the problem of security being weakened during this process. Explanation of the symbols
[0060] 3: Control housing 2: Mobile phone 1: Central Control Center 11: Administrator UI and Control Module 12: Facility Maintenance and Security Information Management Module 13: Facility Access Information Management Module 14: Communication Module 15: Authorization Code (PC) Generation Module
Claims
Claim 1 A security system for the maintenance of public facilities comprising: a control box in which a control device for controlling public facilities is housed and the door is opened and closed by an electronic door opening and closing device; a mobile phone used by a maintenance worker who maintains the control box; and a central control center that generates a permission code (PC) to unlock the electronic door opening and closing device of the control box upon a request from the mobile phone and transmits it to the mobile phone: The above central control center is It includes a control module that controls the central control center and is responsible for the OS (Operating System); a facility maintenance and security information management module that includes facility information regarding the control enclosures and the key number of the electronic door opening and closing device; a facility access information management module that maintains and manages data for managing the access rights of maintenance personnel; a communication module that transmits a facility security app when there is a request from the maintenance personnel's mobile phone and transmits and receives data through the facility security app; and an authorization code (PC) generation module that generates the authorization code (PC). The mobile phone includes a validity determination means for determining whether the authorization code (PC) transmitted from the central control center is valid information, an encryption key code generation means for generating a one-time encryption key code (SKC) when it is determined to be a valid authorization code (PC) by the validity determination means, and an encryption key code (SKC) transmission means for transmitting the encryption key code (SKC) generated from the encryption key code generation means to the control housing. A maintenance security system for public facilities, characterized in that the above control housing includes an encryption key code (SKC) extraction means for extracting an encryption key code (SKC) from an encryption key code (SKC) transmitted from an encryption key code (SKC) transmission means, a decryption means for decrypting the encryption key code (SKC) extracted from the encryption key code (SKC) extraction means to extract a key number (Key-No), and an electronic release module for releasing the electronic door opening / closing device when the key number (Key-No) extracted from the decryption means matches a pre-stored key number (Key-No). Claim 2 A security system for the maintenance of public facilities according to claim 1, wherein the authorization code (PC) includes time information when a specific maintenance worker accesses a specific control unit, and the validity determination means determines whether the specific maintenance worker accesses the specific control unit when the time information corresponds to legitimate time information. Claim 3 A maintenance security system for public facilities according to claim 2, characterized in that the encryption key code (SKC) transmission means is performed by NFC (Near Field Communication). Claim 4 A security system for the maintenance of public facilities according to claim 1, wherein the facility maintenance and information management module of the central control center includes GPS location information of each control box, and further includes a scheduling module for determining a route for determining the order of maintenance of the plurality of control boxes when one maintenance worker maintains the plurality of control boxes, and wherein the scheduling module transmits access time information for accessing each control box to the authorization code (PC) generation module when the one maintenance worker accesses the plurality of control boxes along the route. Claim 5 A security system for the maintenance of public facilities according to claim 5, wherein the facility maintenance and information management module stores the time required for maintenance, the facility access information management module stores the proficiency of each maintenance worker, and the scheduling module determines the route by deep learning according to the time required for maintenance and the proficiency of the maintenance worker. Claim 6 A security maintenance system for public facilities according to claim 4, wherein the validity determination means determines that it is valid when the GPS location information of the accessed control box and the GPS location information of the mobile phone are within a preset error range when the one maintenance worker accesses the plurality of control boxes along the route. Claim 7 A security maintenance system for public facilities according to claim 4, wherein the validity determination means determines that it is valid when the access time of a maintenance worker and the access time information are within a preset error range when the maintenance worker accesses the plurality of control boxes along the route.